The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0063-1 advisory.

  - Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0696)

  - Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77     allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium     security severity: High) (CVE-2023-0697)

  - Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform     an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0698)

  - Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page and browser shutdown. (Chromium security severity: Medium)     (CVE-2023-0699)

  - Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker     to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2023-0700)

  - Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who     convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI     interaction . (Chromium security severity: Medium) (CVE-2023-0701)

  - Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who     convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a     crafted HTML page. (Chromium security severity: Medium) (CVE-2023-0702)

  - Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced     a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions.
    (Chromium security severity: Medium) (CVE-2023-0703)

  - Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote     attacker to bypass same origin policy and proxy settings via a crafted HTML page. (Chromium security     severity: Low) (CVE-2023-0704)

  - Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a     race condition to potentially exploit heap corruption via a crafted HTML page. (Chromium security     severity: Low) (CVE-2023-0705)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

openSUSE 15 Security Update : opera (openSUSE-SU-2023:0063-1)

high Nessus Plugin ID 172066

Version 1.1

Version 1.0

Version 1.1 Oct 24, 2023, 4:27 PM CVSSv2 score source (changed from "CVE-2023-0699" to "CVE-2023-0703") CVSSv3 score source (changed from "CVE-2023-0703" to "None") Plugin Feed: 202310241627
Version 1.0 Mar 3, 2023, 8:01 AM New Plugin Feed: 202303030801