Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary
Title chromium-browser security update
Informations
Name RHSA-2019:4238 First vendor Publication 2019-12-16
Vendor RedHat Last vendor Modification 2019-12-16
Severity (Vendor) N/A Revision 01

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Overall CVSS Score 8.8
Base Score 8.8 Environmental Score 8.8
impact SubScore 5.9 Temporal Score 8.8
Exploitabality Sub Score 2.8
 
Attack Vector Network Attack Complexity Low
Privileges Required None User Interaction Required
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, i686, x86_64 Red Hat Enterprise Linux HPC Node Supplementary (v. 6) - i686, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, i686, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, i686, x86_64

3. Description:

Chromium is an open-source web browser, powered by WebKit (Blink).

This update upgrades Chromium to version 79.0.3945.79.

Security Fix(es):

* chromium-browser: Use after free in Bluetooth (CVE-2019-13725)

* chromium-browser: Heap buffer overflow in password manager (CVE-2019-13726)

* chromium-browser: Insufficient policy enforcement in WebSockets (CVE-2019-13727)

* chromium-browser: Out of bounds write in V8 (CVE-2019-13728)

* chromium-browser: Use after free in WebSockets (CVE-2019-13729)

* chromium-browser: Type Confusion in V8 (CVE-2019-13730)

* chromium-browser: Use after free in WebAudio (CVE-2019-13732)

* chromium-browser: Out of bounds write in SQLite (CVE-2019-13734)

* chromium-browser: Out of bounds write in V8 (CVE-2019-13735)

* chromium-browser: Type Confusion in V8 (CVE-2019-13764)

* chromium-browser: Integer overflow in PDFium (CVE-2019-13736)

* chromium-browser: Insufficient policy enforcement in autocomplete (CVE-2019-13737)

* chromium-browser: Insufficient policy enforcement in navigation (CVE-2019-13738)

* chromium-browser: Incorrect security UI in Omnibox (CVE-2019-13739)

* chromium-browser: Incorrect security UI in sharing (CVE-2019-13740)

* chromium-browser: Insufficient validation of untrusted input in Blink (CVE-2019-13741)

* chromium-browser: Incorrect security UI in Omnibox (CVE-2019-13742)

* chromium-browser: Incorrect security UI in external protocol handling (CVE-2019-13743)

* chromium-browser: Insufficient policy enforcement in cookies (CVE-2019-13744)

* chromium-browser: Insufficient policy enforcement in audio (CVE-2019-13745)

* chromium-browser: Insufficient policy enforcement in Omnibox (CVE-2019-13746)

* chromium-browser: Uninitialized Use in rendering (CVE-2019-13747)

* chromium-browser: Insufficient policy enforcement in developer tools (CVE-2019-13748)

* chromium-browser: Incorrect security UI in Omnibox (CVE-2019-13749)

* chromium-browser: Insufficient data validation in SQLite (CVE-2019-13750)

* chromium-browser: Uninitialized Use in SQLite (CVE-2019-13751)

* chromium-browser: Out of bounds read in SQLite (CVE-2019-13752)

* chromium-browser: Out of bounds read in SQLite (CVE-2019-13753)

* chromium-browser: Insufficient policy enforcement in extensions (CVE-2019-13754)

* chromium-browser: Insufficient policy enforcement in extensions (CVE-2019-13755)

* chromium-browser: Incorrect security UI in printing (CVE-2019-13756)

* chromium-browser: Incorrect security UI in Omnibox (CVE-2019-13757)

* chromium-browser: Insufficient policy enforcement in navigation (CVE-2019-13758)

* chromium-browser: Incorrect security UI in interstitials (CVE-2019-13759)

* chromium-browser: Incorrect security UI in Omnibox (CVE-2019-13761)

* chromium-browser: Insufficient policy enforcement in downloads (CVE-2019-13762)

* chromium-browser: Insufficient policy enforcement in payments (CVE-2019-13763)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the update, Chromium must be restarted for the changes to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1781973 - CVE-2019-13725 chromium-browser: Use after free in Bluetooth 1781974 - CVE-2019-13726 chromium-browser: Heap buffer overflow in password manager 1781975 - CVE-2019-13727 chromium-browser: Insufficient policy enforcement in WebSockets 1781976 - CVE-2019-13728 chromium-browser: Out of bounds write in V8 1781977 - CVE-2019-13729 chromium-browser: Use after free in WebSockets 1781978 - CVE-2019-13730 chromium-browser: Type Confusion in V8 1781979 - CVE-2019-13732 chromium-browser: Use after free in WebAudio 1781980 - CVE-2019-13734 chromium-browser: Out of bounds write in SQLite 1781981 - CVE-2019-13735 chromium-browser: Out of bounds write in V8 1781982 - CVE-2019-13764 chromium-browser: Type Confusion in V8 1781983 - CVE-2019-13736 chromium-browser: Integer overflow in PDFium 1781984 - CVE-2019-13737 chromium-browser: Insufficient policy enforcement in autocomplete 1781985 - CVE-2019-13738 chromium-browser: Insufficient policy enforcement in navigation 1781986 - CVE-2019-13739 chromium-browser: Incorrect security UI in Omnibox 1781987 - CVE-2019-13740 chromium-browser: Incorrect security UI in sharing 1781988 - CVE-2019-13741 chromium-browser: Insufficient validation of untrusted input in Blink 1781989 - CVE-2019-13742 chromium-browser: Incorrect security UI in Omnibox 1781990 - CVE-2019-13743 chromium-browser: Incorrect security UI in external protocol handling 1781991 - CVE-2019-13745 chromium-browser: Insufficient policy enforcement in audio 1781992 - CVE-2019-13746 chromium-browser: Insufficient policy enforcement in Omnibox 1781993 - CVE-2019-13747 chromium-browser: Uninitialized Use in rendering 1781994 - CVE-2019-13748 chromium-browser: Insufficient policy enforcement in developer tools 1781995 - CVE-2019-13749 chromium-browser: Incorrect security UI in Omnibox 1781997 - CVE-2019-13750 chromium-browser: Insufficient data validation in SQLite 1781998 - CVE-2019-13751 chromium-browser: Uninitialized Use in SQLite 1781999 - CVE-2019-13752 chromium-browser: Out of bounds read in SQLite 1782000 - CVE-2019-13753 chromium-browser: Out of bounds read in SQLite 1782001 - CVE-2019-13754 chromium-browser: Insufficient policy enforcement in extensions 1782002 - CVE-2019-13755 chromium-browser: Insufficient policy enforcement in extensions 1782003 - CVE-2019-13756 chromium-browser: Incorrect security UI in printing 1782004 - CVE-2019-13757 chromium-browser: Incorrect security UI in Omnibox 1782005 - CVE-2019-13759 chromium-browser: Incorrect security UI in interstitials 1782006 - CVE-2019-13761 chromium-browser: Incorrect security UI in Omnibox 1782007 - CVE-2019-13762 chromium-browser: Insufficient policy enforcement in downloads 1782008 - CVE-2019-13763 chromium-browser: Insufficient policy enforcement in payments 1782017 - CVE-2019-13758 chromium-browser: Insufficient policy enforcement in navigation 1782021 - CVE-2019-13744 chromium-browser: Insufficient policy enforcement in cookies

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2019-4238.html

CWE : Common Weakness Enumeration

% Id Name
35 % CWE-787 Out-of-bounds Write (CWE/SANS Top 25)
13 % CWE-416 Use After Free
9 % CWE-200 Information Exposure
9 % CWE-125 Out-of-bounds Read
4 % CWE-667 Insufficient Locking
4 % CWE-346 Origin Validation Error
4 % CWE-281 Improper Preservation of Permissions
4 % CWE-269 Improper Privilege Management
4 % CWE-190 Integer Overflow or Wraparound (CWE/SANS Top 25)
4 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer
4 % CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)
4 % CWE-20 Improper Input Validation

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 4724
Application 1
Application 1
Application 1
Application 2
Os 4
Os 2
Os 2
Os 4
Os 1
Os 1
Os 4
Os 4
Os 3
Os 4
Os 3
Os 3
Os 4

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2020-05-23 13:03:44
  • Multiple Updates
2020-03-19 13:19:44
  • First insertion