CVE-2024-4671
chromium-browser: use after free in Visuals
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta).
Descripción
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.19 | qt6-qtwebengine | 6.6.1-r12 |
| alpine 3.20 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.21 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.22 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.23 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r4 |
| alpine edge | qt6-qtwebengine | 6.6.3-r4 |
| chainguard | chromium | 124.0.6367.201-r0 |
| debian 10 | chromium | sin corrección indicada |
| debian 11 | chromium | sin corrección indicada |
| debian 12 | chromium | 124.0.6367.201-1~deb12u1 |
| debian 13 | chromium | 124.0.6367.201-1 |
Mostrar las 16 entradas de 16 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.19 | qt6-qtwebengine | 6.6.1-r12 |
| alpine 3.20 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.21 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.22 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.23 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r4 |
| alpine edge | qt6-qtwebengine | 6.6.3-r4 |
| chainguard | chromium | 124.0.6367.201-r0 |
| debian 10 | chromium | sin corrección indicada |
| debian 11 | chromium | sin corrección indicada |
| debian 12 | chromium | 124.0.6367.201-1~deb12u1 |
| debian 13 | chromium | 124.0.6367.201-1 |
| debian 14 | chromium | 124.0.6367.201-1 |
| echo | chromium | 124.0.6367.201-1~deb12u1 |
| Red Hat | chromium-browser | sin corrección indicada |
| wolfi | chromium | 124.0.6367.201-r0 |
Referencias
- https://access.redhat.com/security/cve/CVE-2024-4671
- https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html
- https://issues.chromium.org/issues/339266700
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/