CVE-2021-21142
Use after free in Payments in Google Chrome on Mac prior to 88.0.4324. ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (niedrig).
Beschreibung
Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 10 | chromium | 88.0.4324.146-1~deb10u1 |
| debian 11 | chromium | 88.0.4324.146-1 |
| debian 12 | chromium | 88.0.4324.146-1 |
| debian 13 | chromium | 88.0.4324.146-1 |
| debian 14 | chromium | 88.0.4324.146-1 |
| debian 9 | chromium | kein Fix angegeben |
| echo | chromium | 88.0.4324.146-1 |
| ubuntu 16.04 | chromium-browser | 89.0.4389.82-0ubuntu0.16.04.1 |
| ubuntu 18.04 | chromium-browser | 89.0.4389.82-0ubuntu0.18.04.1 |
Referenzen
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://crbug.com/1169317
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/
- https://security.gentoo.org/glsa/202104-08
- https://www.cve.org/CVERecord?id=CVE-2021-21142