Lucene search

K
openvasCopyright (C) 2023 Greenbone AGOPENVAS:1361412562310832420
HistoryAug 23, 2023 - 12:00 a.m.

Google Chrome Security Update (chrome-desktop-stable-update-2023-08) - Linux

2023-08-2300:00:00
Copyright (C) 2023 Greenbone AG
plugins.openvas.org
5
google chrome
security update
version 116.0.5845.110
linux
vulnerabilities
cve-2023-4430
cve-2023-4429
cve-2023-4428
cve-2023-4427
cve-2023-4431
use after free
out of bounds
denial of service

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

Google Chrome is prone to multiple
vulnerabilities.

# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:google:chrome";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.832420");
  script_version("2023-10-13T05:06:10+0000");
  script_cve_id("CVE-2023-4430", "CVE-2023-4429", "CVE-2023-4428", "CVE-2023-4427",
                "CVE-2023-4431");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2023-10-13 05:06:10 +0000 (Fri, 13 Oct 2023)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2023-08-25 13:19:00 +0000 (Fri, 25 Aug 2023)");
  script_tag(name:"creation_date", value:"2023-08-23 11:42:32 +0530 (Wed, 23 Aug 2023)");
  script_name("Google Chrome Security Update (chrome-desktop-stable-update-2023-08) - Linux");

  script_tag(name:"summary", value:"Google Chrome is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"Multiple flaws exist due to,

  - Use after free in Vulkan.

  - Use after free in Loader.

  - Out of bounds memory access in CSS.

  - Out of bounds memory access in V8.

  - Out of bounds memory access in Fonts.");

  script_tag(name:"impact", value:"Successful exploitation will allow
  attackers to run arbitrary code, bypass security restrictions, conduct spoofing
  and cause a denial of service on affected system.");

  script_tag(name:"affected", value:"Google Chrome version prior to
  116.0.5845.110 on Linux");

  script_tag(name:"solution", value:"Upgrade to version 116.0.5845.110 or later.
  Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version");
  script_xref(name:"URL", value:"https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2023 Greenbone AG");
  script_family("General");
  script_dependencies("gb_google_chrome_detect_lin.nasl");
  script_mandatory_keys("Google-Chrome/Linux/Ver");
  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
  exit(0);

vers = infos["version"];
path = infos["location"];

if(version_is_less(version:vers, test_version:"116.0.5845.110")) {
  report = report_fixed_ver(installed_version:vers, fixed_version:"116.0.5845.110", install_path:path);

  security_message(port:0, data:report);
  exit(0);
}

exit(99);

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%