Lucene search

K
freebsdFreeBSD8CDD38C7-8EBB-11EE-86BB-A8A1599412C6
HistoryNov 28, 2023 - 12:00 a.m.

chromium -- multiple security fixes

2023-11-2800:00:00
vuxml.freebsd.org
20
chromium
update
7 fixes
high severity
security vulnerabilities
type confusion
use after free
out of bounds memory access
integer overflow
spellcheck
mojo
webaudio
libavif
skia
cve-2023-6348
cve-2023-6347
cve-2023-6346
cve-2023-6350
cve-2023-6351
cve-2023-6345
unix

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.074 Low

EPSS

Percentile

94.1%

Chrome Releases reports:

This update includes 7 security fixes:

[1491459] High CVE-2023-6348: Type Confusion in Spellcheck. Reported by Mark Brand of Google Project Zero on 2023-10-10
[1494461] High CVE-2023-6347: Use after free in Mojo. Reported by Leecraso and Guang Gong of 360 Vulnerability Research Institute on 2023-10-21
[1500856] High CVE-2023-6346: Use after free in WebAudio. Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2023-11-09
[1501766] High CVE-2023-6350: Out of bounds memory access in libavif. Reported by Fudan University on 2023-11-13
[1501770] High CVE-2023-6351: Use after free in libavif. Reported by Fudan University on 2023-11-13
[1505053] High CVE-2023-6345: Integer overflow in Skia. Reported by Benoรฎt Sevens and Clรฉment Lecigne of Googleโ€™s Threat Analysis Group on 2023-11-24

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium<ย 119.0.6045.199UNKNOWN
FreeBSDanynoarchungoogled-chromium<ย 119.0.6045.199UNKNOWN
FreeBSDanynoarchqt5-webengine<ย 5.15.16.p5_2UNKNOWN
FreeBSDanynoarchqt6-webengine<ย 6.6.1_1UNKNOWN

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.074 Low

EPSS

Percentile

94.1%