RedHatRHSA-2017:1399(RHSA-2017:1399) Important: chromium-browser security update
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.226 Low
EPSS
Percentile
96.4%
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 59.0.3071.86.
Security Fix(es):
- Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2017-5070, CVE-2017-5071, CVE-2017-5072, CVE-2017-5073, CVE-2017-5074, CVE-2017-5075, CVE-2017-5076, CVE-2017-5077, CVE-2017-5078, CVE-2017-5079, CVE-2017-5080, CVE-2017-5081, CVE-2017-5086, CVE-2017-5082, CVE-2017-5083, CVE-2017-5085)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | i686 | chromium-browser-debuginfo | < 59.0.3071.86-1.el6_9 | chromium-browser-debuginfo-59.0.3071.86-1.el6_9.i686.rpm |
| RedHat | 6 | x86_64 | chromium-browser-debuginfo | < 59.0.3071.86-1.el6_9 | chromium-browser-debuginfo-59.0.3071.86-1.el6_9.x86_64.rpm |
| RedHat | 6 | i686 | chromium-browser | < 59.0.3071.86-1.el6_9 | chromium-browser-59.0.3071.86-1.el6_9.i686.rpm |
| RedHat | 6 | x86_64 | chromium-browser | < 59.0.3071.86-1.el6_9 | chromium-browser-59.0.3071.86-1.el6_9.x86_64.rpm |
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.226 Low
EPSS
Percentile
96.4%