Lucene search
+L

Fedora Update for chromium FEDORA-2019-5975f6ca93

🗓️ 09 Jan 2020 00:00:00Reported by Copyright (C) 2020 Greenbone Networks GmbHType 
openvas
 openvas
🔗 plugins.openvas.org👁 26 Views

Fedora Update for chromium package FEDORA-2019-5975f6ca9

Related
Refs
Code
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
The vulnerability of Skia in Google Chrome browsers, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
10 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of Google Chrome, related to improper control of access to critical resources, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.
21 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of Google Chrome, related to improper control of access to critical resources, allows a perpetrator to compromise data integrity.
21 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability in the implementation of the TLS protocol in Google Chrome allows a perpetrator to compromise data integrity.
21 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of Google Chrome, related to improper control of access to critical resources, allows a violator to gain unauthorized access to information.
21 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.
21 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of Google Chrome, related to improper control of access to critical resources, allows a perpetrator to compromise data integrity.
21 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.
21 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.
21 Apr 202000:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Omnibox address bar in Google Chrome browser tools allows attackers to compromise data integrity.
21 Apr 202000:00
bdu_fstec
Rows per page
# Copyright (C) 2020 Greenbone Networks GmbH
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.877304");
  script_version("2021-07-14T02:00:49+0000");
  script_cve_id("CVE-2019-5870", "CVE-2019-5871", "CVE-2019-5872", "CVE-2019-5874", "CVE-2019-5875", "CVE-2019-13691", "CVE-2019-13692", "CVE-2019-5876", "CVE-2019-5877", "CVE-2019-5878", "CVE-2019-5879", "CVE-2019-5880", "CVE-2019-5881", "CVE-2019-13659", "CVE-2019-13660", "CVE-2019-13661", "CVE-2019-13662", "CVE-2019-13663", "CVE-2019-13664", "CVE-2019-13665", "CVE-2019-13666", "CVE-2019-13667", "CVE-2019-13668", "CVE-2019-13669", "CVE-2019-13670", "CVE-2019-13671", "CVE-2019-13673", "CVE-2019-13674", "CVE-2019-13675", "CVE-2019-13676", "CVE-2019-13677", "CVE-2019-13678", "CVE-2019-13679", "CVE-2019-13680", "CVE-2019-13681", "CVE-2019-13682", "CVE-2019-13683");
  script_tag(name:"cvss_base", value:"6.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_tag(name:"last_modification", value:"2021-07-14 02:00:49 +0000 (Wed, 14 Jul 2021)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2019-11-25 21:15:00 +0000 (Mon, 25 Nov 2019)");
  script_tag(name:"creation_date", value:"2020-01-09 07:36:48 +0000 (Thu, 09 Jan 2020)");
  script_name("Fedora Update for chromium FEDORA-2019-5975f6ca93");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2020 Greenbone Networks GmbH");
  script_family("Fedora Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC31");

  script_xref(name:"FEDORA", value:"2019-5975f6ca93");
  script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHNIDOKJCBTCYRAVX3NCKHTY2543L3GM");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'chromium'
  package(s) announced via the FEDORA-2019-5975f6ca93 advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"Chromium is an open-source web browser, powered by WebKit (Blink).");

  script_tag(name:"affected", value:"'chromium' package(s) on Fedora 31.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "FC31") {

  if(!isnull(res = isrpmvuln(pkg:"chromium", rpm:"chromium~78.0.3904.70~1.fc31", rls:"FC31"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if (__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Jul 2021 00:00Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.19.6
CVSS 26.8
EPSS0.01443
26