The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-86e4115138 advisory.

    update to 126.0.6478.55

      * High CVE-2024-5830: Type Confusion in V8
      * High CVE-2024-5831: Use after free in Dawn
      * High CVE-2024-5832: Use after free in Dawn
      * High CVE-2024-5833: Type Confusion in V8
      * High CVE-2024-5834: Inappropriate implementation in Dawn
      * High CVE-2024-5835: Heap buffer overflow in Tab Groups
      * High CVE-2024-5836: Inappropriate Implementation in DevTools
      * High CVE-2024-5837: Type Confusion in V8
      * High CVE-2024-5838: Type Confusion in V8
      * Medium CVE-2024-5839: Inappropriate Implementation in Memory Allocator
      * Medium CVE-2024-5840: Policy Bypass in CORS
      * Medium CVE-2024-5841: Use after free in V8
      * Medium CVE-2024-5842: Use after free in Browser UI
      * Medium CVE-2024-5843: Inappropriate implementation in Downloads
      * Medium CVE-2024-5844: Heap buffer overflow in Tab Strip
      * Medium CVE-2024-5845: Use after free in Audio
      * Medium CVE-2024-5846: Use after free in PDFium
      * Medium CVE-2024-5847: Use after free in PDFium

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 39 : chromium (2024-86e4115138)

high Nessus Plugin ID 200506

Version 1.4