CVE-2015-6792
chromium-browser: Fixes from internal audits and fuzzing
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch), Ubuntu (mittel).
Beschreibung
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 7 | chromium-browser | kein Fix angegeben |
| debian 8 | chromium-browser | 48.0.2564.82-1~deb8u1 |
| ubuntu 14.04 | chromium-browser | 47.0.2526.106-0ubuntu0.14.04.1.1107 |
| ubuntu 15.04 | chromium-browser | 47.0.2526.106-0ubuntu0.15.04.1.1192 |
| ubuntu 15.10 | chromium-browser | 47.0.2526.106-0ubuntu0.15.10.1.1218 |
Referenzen
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html
- http://googlechromereleases.blogspot.de/2015/12/stable-channel-update_15.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00030.html
- http://rhn.redhat.com/errata/RHSA-2015-2665.html
- http://www.debian.org/security/2016/dsa-3456
- http://www.securityfocus.com/bid/79348
- http://www.securitytracker.com/id/1034491
Alle 16 Referenzen
- https://access.redhat.com/security/cve/CVE-2015-6792
- https://code.google.com/p/chromium/issues/detail?id=564501
- https://code.google.com/p/chromium/issues/detail?id=569486
- https://codereview.chromium.org/1500153002
- https://codereview.chromium.org/1508563003
- https://nvd.nist.gov/vuln/detail/CVE-2015-6792
- https://security.gentoo.org/glsa/201603-09
- https://www.cve.org/CVERecord?id=CVE-2015-6792