CVE-2021-21146
Use after free in Navigation in Google Chrome prior to 88.0.4324.146 a ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (moyenne).
Description
Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.14 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.15 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.16 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.17 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.18 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.19 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.20 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.21 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.22 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.23 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| debian 10 | chromium | 88.0.4324.146-1~deb10u1 |
| debian 11 | chromium | 88.0.4324.146-1 |
Afficher les 19 entrées de 19 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.14 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.15 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.16 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.17 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.18 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.19 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.20 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.21 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.22 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| alpine 3.23 | qt5-qtwebengine | 5.15.3_git20200401-r0 |
| debian 10 | chromium | 88.0.4324.146-1~deb10u1 |
| debian 11 | chromium | 88.0.4324.146-1 |
| debian 12 | chromium | 88.0.4324.146-1 |
| debian 13 | chromium | 88.0.4324.146-1 |
| debian 14 | chromium | 88.0.4324.146-1 |
| debian 9 | chromium | pas de correctif indiqué |
| echo | chromium | 88.0.4324.146-1 |
| ubuntu 16.04 | chromium-browser | 89.0.4389.82-0ubuntu0.16.04.1 |
| ubuntu 18.04 | chromium-browser | 89.0.4389.82-0ubuntu0.18.04.1 |
Références
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://crbug.com/1161705
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/
- https://security.gentoo.org/glsa/202104-08
- https://www.cve.org/CVERecord?id=CVE-2021-21146