Update to Chromium 68. Security fix for CVE-2018-4117 CVE-2018-6044 CVE-2018-6150 CVE-2018-6151 CVE-2018-6152 CVE-2018-6153 CVE-2018-6154 CVE-2018-6155 CVE-2018-6156 CVE-2018-6157 CVE-2018-6158 CVE-2018-6159 CVE-2018-6161 CVE-2018-6162 CVE-2018-6163 CVE-2018-6149
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory FEDORA-2018-499f2dbc96.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(120392);
script_version("1.8");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/06");
script_cve_id("CVE-2018-4117", "CVE-2018-6044", "CVE-2018-6149", "CVE-2018-6150", "CVE-2018-6151", "CVE-2018-6152", "CVE-2018-6153", "CVE-2018-6154", "CVE-2018-6155", "CVE-2018-6156", "CVE-2018-6157", "CVE-2018-6158", "CVE-2018-6159", "CVE-2018-6160", "CVE-2018-6161", "CVE-2018-6162", "CVE-2018-6163", "CVE-2018-6164", "CVE-2018-6165", "CVE-2018-6166", "CVE-2018-6167", "CVE-2018-6168", "CVE-2018-6169", "CVE-2018-6170", "CVE-2018-6171", "CVE-2018-6172", "CVE-2018-6173", "CVE-2018-6174", "CVE-2018-6175", "CVE-2018-6176", "CVE-2018-6177", "CVE-2018-6178", "CVE-2018-6179");
script_xref(name:"FEDORA", value:"2018-499f2dbc96");
script_name(english:"Fedora 28 : chromium (2018-499f2dbc96)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"Update to Chromium 68. Security fix for CVE-2018-4117 CVE-2018-6044
CVE-2018-6150 CVE-2018-6151 CVE-2018-6152 CVE-2018-6153 CVE-2018-6154
CVE-2018-6155 CVE-2018-6156 CVE-2018-6157 CVE-2018-6158 CVE-2018-6159
CVE-2018-6161 CVE-2018-6162 CVE-2018-6163 CVE-2018-6149
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bodhi.fedoraproject.org/updates/FEDORA-2018-499f2dbc96"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected chromium package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-6174");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:chromium");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:28");
script_set_attribute(attribute:"vuln_publication_date", value:"2018/04/03");
script_set_attribute(attribute:"patch_publication_date", value:"2018/08/26");
script_set_attribute(attribute:"plugin_publication_date", value:"2019/01/03");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^28([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 28", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC28", reference:"chromium-68.0.3440.106-3.fc28")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "chromium");
}
Vendor | Product | Version | CPE |
---|---|---|---|
fedoraproject | fedora | chromium | p-cpe:/a:fedoraproject:fedora:chromium |
fedoraproject | fedora | 28 | cpe:/o:fedoraproject:fedora:28 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4117
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6044
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6149
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6150
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6151
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6152
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6153
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6154
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6155
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6156
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6157
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6158
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6159
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6160
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6161
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6162
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6163
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6164
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6165
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6166
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6167
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6168
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6169
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6170
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6171
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6172
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6173
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6174
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6175
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6176
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6177
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6178
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6179
bodhi.fedoraproject.org/updates/FEDORA-2018-499f2dbc96