The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5148 advisory.

  - Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a     user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome     Extension. (CVE-2022-1870)

  - Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-1853)

  - Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-1854)

  - Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1855)

  - Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced     a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome     Extension or specific user interaction. (CVE-2022-1856)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5148-1 : chromium - security update

critical Nessus Plugin ID 161512

Version 1.9

Version 1.8

Version 1.7

Version 1.9 Oct 26, 2023, 2:14 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 score source (changed from "CVE-2022-1870" to "CVE-2022-1876") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202310261414
Version 1.8 Mar 23, 2023, 8:46 PM Plugin requirements Plugin Feed: 202303232046
Version 1.7 Mar 21, 2023, 7:30 PM Plugin metadata Plugin Feed: 202303211930