CVE-2024-5274
chromium-browser: another type Confusion in V8
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta).
Descripción
Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.20 | qt6-qtwebengine | 6.6.3-r5 |
| alpine 3.21 | qt6-qtwebengine | 6.6.3-r5 |
| alpine 3.22 | qt6-qtwebengine | 6.6.3-r5 |
| alpine 3.23 | qt6-qtwebengine | 6.6.3-r5 |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r5 |
| alpine edge | qt6-qtwebengine | 6.6.3-r5 |
| chainguard | chromium | 125.0.6422.112-r0 |
| debian 10 | chromium | sin corrección indicada |
| debian 11 | chromium | sin corrección indicada |
| debian 12 | chromium | 125.0.6422.112-1~deb12u1 |
| debian 13 | chromium | 125.0.6422.112-1 |
| debian 14 | chromium | 125.0.6422.112-1 |
Mostrar las 15 entradas de 15 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.20 | qt6-qtwebengine | 6.6.3-r5 |
| alpine 3.21 | qt6-qtwebengine | 6.6.3-r5 |
| alpine 3.22 | qt6-qtwebengine | 6.6.3-r5 |
| alpine 3.23 | qt6-qtwebengine | 6.6.3-r5 |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r5 |
| alpine edge | qt6-qtwebengine | 6.6.3-r5 |
| chainguard | chromium | 125.0.6422.112-r0 |
| debian 10 | chromium | sin corrección indicada |
| debian 11 | chromium | sin corrección indicada |
| debian 12 | chromium | 125.0.6422.112-1~deb12u1 |
| debian 13 | chromium | 125.0.6422.112-1 |
| debian 14 | chromium | 125.0.6422.112-1 |
| echo | chromium | 125.0.6422.112-1~deb12u1 |
| Red Hat | chromium-browser | sin corrección indicada |
| wolfi | chromium | 125.0.6422.112-r0 |
Referencias
- https://access.redhat.com/security/cve/CVE-2024-5274
- https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html
- https://issues.chromium.org/issues/341663589
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVC3FNI7HZLVSRIFBVUSBHI233DZYBKP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6IBUYVPD4MIFQNNYBGAPI5MOECWXXOB/
- https://nvd.nist.gov/vuln/detail/CVE-2024-5274
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5274