Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201502-13
HistoryFeb 17, 2015 - 12:00 a.m.

Chromium: Multiple vulnerabilities

2015-02-1700:00:00
Gentoo Foundation
security.gentoo.org
30

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.043

Percentile

92.4%

JSON

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker may be able to cause a Denial of Service condition, gain privileges via a filesystem: URI, or have other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=www-client/chromium-40.0.2214.111"
OSVersionArchitecturePackageVersionFilename
Gentooanyallwww-client/chromium< 40.0.2214.111UNKNOWN

Related

suse 1
nessus 19
openvas 16
threatpost 1
chrome 3
securityvulns 2
redhat 2
ubuntu 2
freebsd 2
archlinux 2
mageia 3
kaspersky 1
gentoo 1
debiancve 25
cve 23
prion 22
nvd 23
ubuntucve 23
cvelist 24
veracode 4
suse
suse
Security update for chromium (important)
2015-03-06 13:04:51
nessus
nessus
RHEL 6 : chromium-browser (RHSA-2015:0093)
2015-01-28 00:00:00
openSUSE Security Update : chromium (openSUSE-2015-204)
2015-03-09 00:00:00
Google Chrome < 40.0.2214.91 Multiple Vulnerabilities
2015-02-11 00:00:00
openvas
openvas
openSUSE: Security Advisory for chromium (openSUSE-SU-2015:0441-1)
2015-03-06 00:00:00
Gentoo Security Advisory GLSA 201502-13
2015-09-29 00:00:00
Google Chrome Multiple Vulnerabilities -02 (Jan 2015) - Linux
2015-01-27 00:00:00
threatpost
threatpost
Chrome 40 Patches 62 Security Vulnerabilities
2015-01-22 12:45:41
chrome
chrome
Stable Channel Update
2015-01-21 00:00:00
Stable Channel Update
2015-02-05 00:00:00
Stable Channel Update for Chrome OS
2015-02-10 00:00:00
securityvulns
securityvulns
Google Chrome / Chromium multiple security vulnerabilities
2015-02-02 00:00:00
[USN-2476-1] Oxide vulnerabilities
2015-02-02 00:00:00
redhat
redhat
(RHSA-2015:0093) Important: chromium-browser security update
2015-01-27 00:00:00
(RHSA-2015:0163) Important: chromium-browser security update
2015-02-10 00:00:00
ubuntu
ubuntu
Oxide vulnerabilities
2015-01-26 00:00:00
Oxide vulnerabilities
2015-02-10 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-01-21 00:00:00
chromium -- multiple vulnerabilities
2015-02-05 00:00:00
archlinux
archlinux
chromium: multiple issues
2015-01-25 00:00:00
chromium: multiple issues
2015-02-06 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2015-01-24 17:32:04
Updated chromium-browser-stable packages fix security vulnerabilities
2015-02-11 23:47:51
Updated icu packages fix security vulnerabilities
2015-01-31 16:23:52
kaspersky
kaspersky
KLA10443 Multiple vulnerabilities in Google Chrome
2015-02-06 00:00:00
gentoo
gentoo
ICU: Multiple Vulnerabilities
2015-03-14 00:00:00
debiancve
debiancve
CVE-2014-9648
2015-01-27 20:01:00
CVE-2014-9647
2015-01-27 20:00:00
CVE-2014-9646
2015-01-27 19:59:00
cve
cve
CVE-2014-9648
2015-01-27 20:01:43
CVE-2014-9647
2015-01-27 20:00:28
CVE-2014-9646
2015-01-27 19:59:11
prion
prion
Design/Logic Flaw
2015-01-27 20:01:00
Design/Logic Flaw
2015-01-27 20:00:00
Design/Logic Flaw
2015-01-27 19:59:00
nvd
nvd
CVE-2014-9647
2015-01-27 20:00:28
CVE-2014-9648
2015-01-27 20:01:43
CVE-2014-9646
2015-01-27 19:59:11
ubuntucve
ubuntucve
CVE-2014-9647
2015-01-27 00:00:00
CVE-2014-9646
2015-01-27 00:00:00
CVE-2014-9648
2015-01-27 00:00:00
cvelist
cvelist
CVE-2014-9647
2015-01-27 11:00:00
CVE-2014-9648
2015-01-27 11:00:00
CVE-2014-9646
2015-01-27 11:00:00
veracode
veracode
Denial Of Service (DoS)
2020-09-21 06:32:10
Denial Of Service (DoS)
2020-09-21 06:34:22
Denial Of Service (DoS) Through Use-after-free Vulnerability
2017-02-06 01:59:28

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.043

Percentile

92.4%

JSON
Related for GLSA-201502-13
suse1nessus19openvas16threatpost1chrome3securityvulns2redhat2ubuntu2freebsd2archlinux2mageia3kaspersky1gentoo1debiancve25cve23prion22nvd23ubuntucve23cvelist24veracode4