CVE-2020-6509
chromium-browser: Use after free in extensions
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch), Ubuntu (mittel).
Beschreibung
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.12 | chromium | 83.0.4103.116-r0 |
| alpine 3.13 | chromium | 83.0.4103.116-r0 |
| alpine 3.14 | chromium | 83.0.4103.116-r0 |
| alpine 3.15 | chromium | 83.0.4103.116-r0 |
| alpine 3.16 | chromium | 83.0.4103.116-r0 |
| alpine 3.17 | chromium | 83.0.4103.116-r0 |
| alpine 3.18 | chromium | 83.0.4103.116-r0 |
| alpine 3.19 | chromium | 83.0.4103.116-r0 |
| alpine 3.20 | chromium | 83.0.4103.116-r0 |
| alpine 3.21 | chromium | 83.0.4103.116-r0 |
| alpine 3.22 | chromium | 83.0.4103.116-r0 |
| alpine 3.23 | chromium | 83.0.4103.116-r0 |
Alle 23 Einträge aus 23 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.12 | chromium | 83.0.4103.116-r0 |
| alpine 3.13 | chromium | 83.0.4103.116-r0 |
| alpine 3.14 | chromium | 83.0.4103.116-r0 |
| alpine 3.15 | chromium | 83.0.4103.116-r0 |
| alpine 3.16 | chromium | 83.0.4103.116-r0 |
| alpine 3.17 | chromium | 83.0.4103.116-r0 |
| alpine 3.18 | chromium | 83.0.4103.116-r0 |
| alpine 3.19 | chromium | 83.0.4103.116-r0 |
| alpine 3.20 | chromium | 83.0.4103.116-r0 |
| alpine 3.21 | chromium | 83.0.4103.116-r0 |
| alpine 3.22 | chromium | 83.0.4103.116-r0 |
| alpine 3.23 | chromium | 83.0.4103.116-r0 |
| alpine 3.24 | chromium | 83.0.4103.116-r0 |
| alpine edge | chromium | 83.0.4103.116-r0 |
| debian 10 | chromium | 83.0.4103.116-1~deb10u1 |
| debian 11 | chromium | 83.0.4103.116-1 |
| debian 12 | chromium | 83.0.4103.116-1 |
| debian 13 | chromium | 83.0.4103.116-1 |
| debian 14 | chromium | 83.0.4103.116-1 |
| debian 9 | chromium | kein Fix angegeben |
| echo | chromium | 83.0.4103.116-1 |
| ubuntu 16.04 | chromium-browser | 84.0.4147.105-0ubuntu0.16.04.1 |
| ubuntu 18.04 | chromium-browser | 84.0.4147.105-0ubuntu0.18.04.1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00040.html
- https://access.redhat.com/security/cve/CVE-2020-6509
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop_22.html
- https://crbug.com/1092308
- https://nvd.nist.gov/vuln/detail/CVE-2020-6509
- https://security.gentoo.org/glsa/202007-08
- https://www.cve.org/CVERecord?id=CVE-2020-6509