Lucene search

Veracode Vulnerability DatabaseVERACODE:39788

HistoryMar 16, 2023 - 1:40 a.m.

Denial Of Service (DoS)

2023-03-1601:40:38

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

44.9%

JSON

Google Chrome is vulnerable to Denial Of Service (DoS). The vulnerability exists due to the out-of-bound read in WebUI Settings, which allows an attacker to perform an out-of-bounds memory read via a crafted HTML page, leading to an application crash.

CPENameOperatorVersion
chromium:sideq83.0.4103.116-3.1
chromium:sideq88.0.4324.182-1
chromium:bullseyeeq83.0.4103.116-3.1
chromium:bustereq87.0.4280.141-0.1~deb10u1
chromium:bustereq83.0.4103.116-1~deb10u3
chromium:sideq83.0.4103.116-3.1
chromium:sideq88.0.4324.182-1
chromium:bullseyeeq83.0.4103.116-3.1
chromium:bustereq87.0.4280.141-0.1~deb10u1
chromium:bustereq83.0.4103.116-1~deb10u3

Name	Operator	Version
chromium:sid	eq	83.0.4103.116-3.1
chromium:sid	eq	88.0.4324.182-1
chromium:bullseye	eq	83.0.4103.116-3.1
chromium:buster	eq	87.0.4280.141-0.1~deb10u1
chromium:buster	eq	83.0.4103.116-1~deb10u3
chromium:sid	eq	83.0.4103.116-3.1
chromium:sid	eq	88.0.4324.182-1
chromium:bullseye	eq	83.0.4103.116-3.1
chromium:buster	eq	87.0.4280.141-0.1~deb10u1
chromium:buster	eq	83.0.4103.116-1~deb10u3

References

chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html

crbug.com/1164816

security-tracker.debian.org/tracker/CVE-2021-21200

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

44.9%

JSON

Related for VERACODE:39788