Update to 80.0.3987.132. Lots of security fixes here. VAAPI re-enabled by default except on NVIDIA.
List of CVEs fixed (since last update) :
CVE-2019-20446
CVE-2020-6381
CVE-2020-6382
CVE-2020-6383
CVE-2020-6384
CVE-2020-6385
CVE-2020-6386
CVE-2020-6387
CVE-2020-6388
CVE-2020-6389
CVE-2020-6390
CVE-2020-6391
CVE-2020-6392
CVE-2020-6393
CVE-2020-6394
CVE-2020-6395
CVE-2020-6396
CVE-2020-6397
CVE-2020-6398
CVE-2020-6399
CVE-2020-6400
CVE-2020-6401
CVE-2020-6402
CVE-2020-6403
CVE-2020-6404
CVE-2020-6405
CVE-2020-6406
CVE-2020-6407
CVE-2020-6408
CVE-2020-6409
CVE-2020-6410
CVE-2020-6411
CVE-2020-6412
CVE-2020-6413
CVE-2020-6414
CVE-2020-6415
CVE-2020-6416
CVE-2020-6417
CVE-2020-6418
CVE-2020-6420
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory FEDORA-2020-f6271d7afa.
#
include('deprecated_nasl_level.inc');
include("compat.inc");
if (description)
{
script_id(134718);
script_version("1.9");
script_set_attribute(attribute:"plugin_modification_date", value:"2022/12/06");
script_cve_id("CVE-2019-20446", "CVE-2020-10531", "CVE-2020-6381", "CVE-2020-6382", "CVE-2020-6383", "CVE-2020-6384", "CVE-2020-6385", "CVE-2020-6386", "CVE-2020-6387", "CVE-2020-6388", "CVE-2020-6389", "CVE-2020-6390", "CVE-2020-6391", "CVE-2020-6392", "CVE-2020-6393", "CVE-2020-6394", "CVE-2020-6395", "CVE-2020-6396", "CVE-2020-6397", "CVE-2020-6398", "CVE-2020-6399", "CVE-2020-6400", "CVE-2020-6401", "CVE-2020-6402", "CVE-2020-6403", "CVE-2020-6404", "CVE-2020-6405", "CVE-2020-6406", "CVE-2020-6407", "CVE-2020-6408", "CVE-2020-6409", "CVE-2020-6410", "CVE-2020-6411", "CVE-2020-6412", "CVE-2020-6413", "CVE-2020-6414", "CVE-2020-6415", "CVE-2020-6416", "CVE-2020-6417", "CVE-2020-6418", "CVE-2020-6420");
script_xref(name:"FEDORA", value:"2020-f6271d7afa");
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2022/05/03");
script_xref(name:"CEA-ID", value:"CEA-2020-0023");
script_name(english:"Fedora 31 : chromium (2020-f6271d7afa)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"Update to 80.0.3987.132. Lots of security fixes here. VAAPI re-enabled
by default except on NVIDIA.
List of CVEs fixed (since last update) :
- CVE-2019-20446
- CVE-2020-6381
- CVE-2020-6382
- CVE-2020-6383
- CVE-2020-6384
- CVE-2020-6385
- CVE-2020-6386
- CVE-2020-6387
- CVE-2020-6388
- CVE-2020-6389
- CVE-2020-6390
- CVE-2020-6391
- CVE-2020-6392
- CVE-2020-6393
- CVE-2020-6394
- CVE-2020-6395
- CVE-2020-6396
- CVE-2020-6397
- CVE-2020-6398
- CVE-2020-6399
- CVE-2020-6400
- CVE-2020-6401
- CVE-2020-6402
- CVE-2020-6403
- CVE-2020-6404
- CVE-2020-6405
- CVE-2020-6406
- CVE-2020-6407
- CVE-2020-6408
- CVE-2020-6409
- CVE-2020-6410
- CVE-2020-6411
- CVE-2020-6412
- CVE-2020-6413
- CVE-2020-6414
- CVE-2020-6415
- CVE-2020-6416
- CVE-2020-6417
- CVE-2020-6418
- CVE-2020-6420
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bodhi.fedoraproject.org/updates/FEDORA-2020-f6271d7afa"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected chromium package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-6420");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"exploited_by_malware", value:"true");
script_set_attribute(attribute:"metasploit_name", value:'Google Chrome 80 JSCreate side-effect type confusion exploit');
script_set_attribute(attribute:"exploit_framework_metasploit", value:"true");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:chromium");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:31");
script_set_attribute(attribute:"vuln_publication_date", value:"2020/02/02");
script_set_attribute(attribute:"patch_publication_date", value:"2020/03/20");
script_set_attribute(attribute:"plugin_publication_date", value:"2020/03/20");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2020-2022 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^31([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 31", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC31", reference:"chromium-80.0.3987.132-1.fc31", allowmaj:TRUE)) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "chromium");
}
Vendor | Product | Version | CPE |
---|---|---|---|
fedoraproject | fedora | chromium | p-cpe:/a:fedoraproject:fedora:chromium |
fedoraproject | fedora | 31 | cpe:/o:fedoraproject:fedora:31 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20446
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6381
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6382
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6383
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6384
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6385
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6386
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6387
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6388
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6389
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6390
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6391
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6392
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6393
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6394
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6395
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6396
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6397
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6398
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6399
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6400
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6401
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6402
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6403
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6404
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6405
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6406
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6407
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6408
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6409
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6410
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6411
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6412
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6413
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6414
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6415
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6416
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6417
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6418
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6420
bodhi.fedoraproject.org/updates/FEDORA-2020-f6271d7afa