Lucene search
Gentoo FoundationGLSA-201506-04HistoryJun 23, 2015 - 12:00 a.m.
Chromium: Multiple vulnerabilities
2015-06-2300:00:00
Gentoo Foundation
security.gentoo.org
22
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.067 Low
EPSS
Percentile
93.7%
Background
Chromium is an open-source web browser project.
Description
Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.
Impact
A remote attacker can cause arbitrary remote code execution, Denial of Service or bypass of security mechanisms.
Workaround
There is no known workaround at this time.
Resolution
All Chromium users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose
">=www-client/chromium-43.0.2357.65"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | www-client/chromium | < 43.0.2357.65 | UNKNOWN |
Related
openvas
openvas
Gentoo Security Advisory GLSA 201506-04
2015-09-29 00:00:00
Debian Security Advisory DSA 3267-1 (chromium-browser - security update)
2015-05-22 00:00:00
Google Chrome Multiple Vulnerabilities - 02 - May15 (Mac OS X)
2015-05-27 00:00:00
nessus
nessus
GLSA-201506-04 : Chromium: Multiple vulnerabilities
2015-06-23 00:00:00
Google Chrome < 43.0.2357.65 Multiple Vulnerabilities (Mac OS X)
2015-05-21 00:00:00
Google Chrome < 43.0.2357.65 Multiple Vulnerabilities
2015-06-16 00:00:00
archlinux
archlinux
chromium: multiple issues
2015-05-21 00:00:00
chromium: multiple issues
2015-04-18 00:00:00
chromium: multiple issues
2015-04-29 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2015-05-23 21:53:02
Updated chromium-browser-stable packages fix security vulnerabilities
2015-04-24 00:14:25
Updated chromium-browser-stable packages fix security vulnerabilities
2015-05-03 03:19:16
debian
debian
[SECURITY] [DSA 3267-1] chromium-browser security update
2015-05-22 05:02:40
[SECURITY] [DSA 3267-1] chromium-browser security update
2015-05-22 05:02:40
[SECURITY] [DSA 3238-1] chromium-browser security update
2015-04-27 02:41:29
chrome
chrome
Stable Channel Update
2015-05-19 00:00:00
Stable Channel Update
2015-04-14 00:00:00
Stable Channel Update
2015-04-28 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3267-1] chromium-browser security update
2015-05-25 00:00:00
Google Chrome / Chromium multiple security vulnerabilities
2015-05-25 00:00:00
[SECURITY] [DSA 3238-1] chromium-browser security update
2015-05-05 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-05-19 00:00:00
chromium -- multiple vulnerabilities
2015-04-14 00:00:00
chromium -- multiple vulnerabilities
2015-04-28 00:00:00
redhat
redhat
(RHSA-2015:1023) Important: chromium-browser security update
2015-05-25 00:00:00
(RHSA-2015:0816) Important: chromium-browser security update
2015-04-16 00:00:00
(RHSA-2015:0921) Important: chromium-browser security and bug fix update
2015-04-30 00:00:00
threatpost
threatpost
Google Fixes Dozens of Bugs in Chrome 42
2015-04-14 14:44:57
Google Fixes Sandbox Escape in Chrome
2015-05-19 13:19:05
osv
osv
chromium-browser - security update
2015-05-22 00:00:00
chromium-browser - security update
2015-04-26 00:00:00
chromium-browser - security update
2015-04-30 00:00:00
kaspersky
kaspersky
KLA10585 Multiple vulnerabilities in Google Chrome
2015-05-19 00:00:00
KLA10546 Multiple vulnerabilities in Google Chrome
2015-04-14 00:00:00
KLA10567 Denial of service vulnerability in Google Chrome
2015-04-28 00:00:00
thn
thn
Google Launches Chrome 42 with Push Notifications
2015-04-15 01:31:00
ubuntu
ubuntu
Oxide vulnerabilities
2015-05-21 00:00:00
Oxide vulnerabilities
2015-04-27 00:00:00
Oxide vulnerabilities
2015-05-06 00:00:00
suse
suse
Security update for Chromium (important)
2015-04-08 16:06:12
debiancve
debiancve
ubuntucve
ubuntucve
cve
cve
prion
prion
Design/Logic Flaw
2015-05-20 10:59:00
Buffer overflow
2015-05-20 10:59:00
Code injection
2015-05-20 10:59:00
fedora
fedora
[SECURITY] Fedora 22 Update: libvpx-1.3.0-7.fc22
2015-09-24 08:32:37
[SECURITY] Fedora 21 Update: libvpx-1.3.0-7.fc21
2015-10-05 22:55:46
[SECURITY] Fedora 23 Update: libvpx-1.4.0-5.fc23
2015-09-20 15:26:23
packetstorm
packetstorm
Chrome Blink SpeechRecognitionController Use-After-Free
2016-11-23 00:00:00
zdt
zdt
Google Chrome SpeechRecognitionClient Use-After-Free Remote Code Execution Vulnerability
2015-05-24 00:00:00
Chrome Blink SpeechRecognitionController Use-After-Free Exploit
2016-11-24 00:00:00
Google Chrome 43.0 - Certificate MIME Handling Integer Overflow Exploit
2015-08-15 00:00:00
zdi
zdi
checkpoint_advisories
checkpoint_advisories
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.067 Low
EPSS
Percentile
93.7%
Related for GLSA-201506-04