Action not permitted
Modal body text goes here.
cve-2016-1684
Vulnerability from cvelistv5
Published
2016-06-05 23:00
Modified
2024-08-05 23:02
Severity ?
EPSS score ?
Summary
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T23:02:13.291Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://crbug.com/583171" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d" }, { "name": "DSA-3605", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2016/dsa-3605" }, { "name": "90876", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/90876" }, { "name": "APPLE-SA-2016-07-18-4", "tags": [ "vendor-advisory", "x_refsource_APPLE", "x_transferred" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html" }, { "name": "APPLE-SA-2016-07-18-3", "tags": [ "vendor-advisory", "x_refsource_APPLE", "x_transferred" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html" }, { "name": "APPLE-SA-2016-07-18-2", "tags": [ "vendor-advisory", "x_refsource_APPLE", "x_transferred" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html" }, { "name": "openSUSE-SU-2016:1496", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT206901" }, { "name": "1035981", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1035981" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017" }, { "name": "DSA-3590", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2016/dsa-3590" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" }, { "name": "USN-2992-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "http://www.ubuntu.com/usn/USN-2992-1" }, { "name": "openSUSE-SU-2016:1430", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" }, { "name": "APPLE-SA-2016-07-18-1", "tags": [ "vendor-advisory", "x_refsource_APPLE", "x_transferred" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html" }, { "name": "APPLE-SA-2016-07-18-6", "tags": [ "vendor-advisory", "x_refsource_APPLE", "x_transferred" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html" }, { "name": "RHSA-2016:1190", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2016:1190" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT206905" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT206903" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT206902" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT206904" }, { "name": "GLSA-201607-07", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/201607-07" }, { "name": "openSUSE-SU-2016:1433", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.apple.com/HT206899" }, { "name": "FEDORA-2019-320d5295fc", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2016-05-25T00:00:00", "descriptions": [ { "lang": "en", "value": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2019-06-18T19:06:06", "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://crbug.com/583171" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d" }, { "name": "DSA-3605", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2016/dsa-3605" }, { "name": "90876", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/90876" }, { "name": "APPLE-SA-2016-07-18-4", "tags": [ "vendor-advisory", "x_refsource_APPLE" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html" }, { "name": "APPLE-SA-2016-07-18-3", "tags": [ "vendor-advisory", "x_refsource_APPLE" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html" }, { "name": "APPLE-SA-2016-07-18-2", "tags": [ "vendor-advisory", "x_refsource_APPLE" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html" }, { "name": "openSUSE-SU-2016:1496", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT206901" }, { "name": "1035981", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1035981" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017" }, { "name": "DSA-3590", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2016/dsa-3590" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" }, { "name": "USN-2992-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "http://www.ubuntu.com/usn/USN-2992-1" }, { "name": "openSUSE-SU-2016:1430", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" }, { "name": "APPLE-SA-2016-07-18-1", "tags": [ "vendor-advisory", "x_refsource_APPLE" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html" }, { "name": "APPLE-SA-2016-07-18-6", "tags": [ "vendor-advisory", "x_refsource_APPLE" ], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html" }, { "name": "RHSA-2016:1190", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2016:1190" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT206905" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT206903" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT206902" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT206904" }, { "name": "GLSA-201607-07", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/201607-07" }, { "name": "openSUSE-SU-2016:1433", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.apple.com/HT206899" }, { "name": "FEDORA-2019-320d5295fc", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "security@google.com", "ID": "CVE-2016-1684", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://crbug.com/583171", "refsource": "CONFIRM", "url": "https://crbug.com/583171" }, { "name": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d", "refsource": "CONFIRM", "url": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d" }, { "name": "DSA-3605", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2016/dsa-3605" }, { "name": "90876", "refsource": "BID", "url": "http://www.securityfocus.com/bid/90876" }, { "name": "APPLE-SA-2016-07-18-4", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html" }, { "name": "APPLE-SA-2016-07-18-3", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html" }, { "name": "APPLE-SA-2016-07-18-2", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html" }, { "name": "openSUSE-SU-2016:1496", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" }, { "name": "https://support.apple.com/HT206901", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206901" }, { "name": "1035981", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1035981" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017" }, { "name": "DSA-3590", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2016/dsa-3590" }, { "name": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "refsource": "CONFIRM", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" }, { "name": "USN-2992-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-2992-1" }, { "name": "openSUSE-SU-2016:1430", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" }, { "name": "APPLE-SA-2016-07-18-1", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html" }, { "name": "APPLE-SA-2016-07-18-6", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html" }, { "name": "RHSA-2016:1190", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2016:1190" }, { "name": "https://support.apple.com/HT206905", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206905" }, { "name": "https://support.apple.com/HT206903", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206903" }, { "name": "https://support.apple.com/HT206902", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206902" }, { "name": "https://support.apple.com/HT206904", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206904" }, { "name": "GLSA-201607-07", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201607-07" }, { "name": "openSUSE-SU-2016:1433", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" }, { "name": "https://support.apple.com/HT206899", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206899" }, { "name": "FEDORA-2019-320d5295fc", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/" } ] } } } }, "cveMetadata": { "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "assignerShortName": "Chrome", "cveId": "CVE-2016-1684", "datePublished": "2016-06-05T23:00:00", "dateReserved": "2016-01-12T00:00:00", "dateUpdated": "2024-08-05T23:02:13.291Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2016-1684\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2016-06-05T23:59:13.117\",\"lastModified\":\"2023-11-07T02:30:37.170\",\"vulnStatus\":\"Modified\",\"evaluatorComment\":\"\u003ca href=\\\"http://cwe.mitre.org/data/definitions/190.html\\\"\u003eCWE-190: Integer Overflow or Wraparound\u003c/a\u003e\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.\"},{\"lang\":\"es\",\"value\":\"numbers.c en libxslt en versiones anteriores a 1.1.29, como es usado en Google Chrome en versiones anteriores a 51.0.2704.63, no maneja correctamente el token de formato i para datos xsl:number, lo que permite a atacantes remotos provocar una denegaci\u00f3n del servicio (desbordamiento de entero o consumo de recursos) o posiblemente tener otro impacto no especificado a trav\u00e9s de un documento manipulado.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:P/I:P/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":5.1},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":4.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"50.0.2661.102\",\"matchCriteriaId\":\"D80D4D1E-C218-4105-8DB1-1D6BCC693F23\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.1.28\",\"matchCriteriaId\":\"BF2EBD51-DEC5-49DD-BF2A-BFEFF02BC812\"}]}]}],\"references\":[{\"url\":\"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3590\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3605\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.securityfocus.com/bid/90876\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.securitytracker.com/id/1035981\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2992-1\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1190\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1340017\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://crbug.com/583171\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://security.gentoo.org/glsa/201607-07\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://support.apple.com/HT206899\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://support.apple.com/HT206901\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://support.apple.com/HT206902\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://support.apple.com/HT206903\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://support.apple.com/HT206904\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://support.apple.com/HT206905\",\"source\":\"chrome-cve-admin@google.com\"}]}}" } }
rhsa-2016_1190
Vulnerability from csaf_redhat
Published
2016-06-01 10:50
Modified
2024-11-05 19:21
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 51.0.2704.63.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-1672, CVE-2016-1673, CVE-2016-1674, CVE-2016-1675, CVE-2016-1676, CVE-2016-1678, CVE-2016-1679, CVE-2016-1680, CVE-2016-1681, CVE-2016-1695, CVE-2016-1677, CVE-2016-1682, CVE-2016-1683, CVE-2016-1684, CVE-2016-1685, CVE-2016-1686, CVE-2016-1687, CVE-2016-1688, CVE-2016-1689, CVE-2016-1690, CVE-2016-1691, CVE-2016-1692, CVE-2016-1693, CVE-2016-1694)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 51.0.2704.63.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-1672, CVE-2016-1673, CVE-2016-1674, CVE-2016-1675, CVE-2016-1676, CVE-2016-1678, CVE-2016-1679, CVE-2016-1680, CVE-2016-1681, CVE-2016-1695, CVE-2016-1677, CVE-2016-1682, CVE-2016-1683, CVE-2016-1684, CVE-2016-1685, CVE-2016-1686, CVE-2016-1687, CVE-2016-1688, CVE-2016-1689, CVE-2016-1690, CVE-2016-1691, CVE-2016-1692, CVE-2016-1693, CVE-2016-1694)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2016:1190", "url": "https://access.redhat.com/errata/RHSA-2016:1190" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "https://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" }, { "category": "external", "summary": "1340005", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340005" }, { "category": "external", "summary": "1340006", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340006" }, { "category": "external", "summary": "1340007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340007" }, { "category": "external", "summary": "1340008", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340008" }, { "category": "external", "summary": "1340009", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340009" }, { "category": "external", "summary": "1340010", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340010" }, { "category": "external", "summary": "1340011", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340011" }, { "category": "external", "summary": "1340012", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340012" }, { "category": "external", "summary": "1340013", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340013" }, { "category": "external", "summary": "1340014", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340014" }, { "category": "external", "summary": "1340015", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340015" }, { "category": "external", "summary": "1340016", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340016" }, { "category": "external", "summary": "1340017", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017" }, { "category": "external", "summary": "1340018", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340018" }, { "category": "external", "summary": "1340019", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340019" }, { "category": "external", "summary": "1340021", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340021" }, { "category": "external", "summary": "1340022", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340022" }, { "category": "external", "summary": "1340023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340023" }, { "category": "external", "summary": "1340024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340024" }, { "category": "external", "summary": "1340026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340026" }, { "category": "external", "summary": "1340027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340027" }, { "category": "external", "summary": "1340028", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340028" }, { "category": "external", "summary": "1340029", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340029" }, { "category": "external", "summary": "1340030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340030" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1190.json" } ], "title": "Red Hat Security Advisory: chromium-browser security update", "tracking": { "current_release_date": "2024-11-05T19:21:11+00:00", "generator": { "date": "2024-11-05T19:21:11+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2016:1190", "initial_release_date": "2016-06-01T10:50:06+00:00", "revision_history": [ { "date": "2016-06-01T10:50:06+00:00", "number": "1", "summary": "Initial version" }, { "date": "2016-06-01T10:50:06+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T19:21:11+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.8.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.8.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.8.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "chromium-browser-0:51.0.2704.63-1.el6.i686", "product": { "name": "chromium-browser-0:51.0.2704.63-1.el6.i686", "product_id": "chromium-browser-0:51.0.2704.63-1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/chromium-browser@51.0.2704.63-1.el6?arch=i686" } } }, { "category": "product_version", "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "product": { "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "product_id": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@51.0.2704.63-1.el6?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64", "product": { "name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64", "product_id": "chromium-browser-0:51.0.2704.63-1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/chromium-browser@51.0.2704.63-1.el6?arch=x86_64" } } }, { "category": "product_version", "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "product": { "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "product_id": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@51.0.2704.63-1.el6?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686" }, "product_reference": "chromium-browser-0:51.0.2704.63-1.el6.i686", "relates_to_product_reference": "6Client-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64" }, "product_reference": "chromium-browser-0:51.0.2704.63-1.el6.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686" }, "product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "relates_to_product_reference": "6Client-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" }, "product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686" }, "product_reference": "chromium-browser-0:51.0.2704.63-1.el6.i686", "relates_to_product_reference": "6Server-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64" }, "product_reference": "chromium-browser-0:51.0.2704.63-1.el6.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686" }, "product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "relates_to_product_reference": "6Server-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" }, "product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686" }, "product_reference": "chromium-browser-0:51.0.2704.63-1.el6.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64" }, "product_reference": "chromium-browser-0:51.0.2704.63-1.el6.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686" }, "product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.8.z" }, { "category": "default_component_of", "full_product_name": { "name": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" }, "product_reference": "chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.8.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-1672", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340005" } ], "notes": [ { "category": "description", "text": "The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: cross-origin bypass in extension bindings", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1672" }, { "category": "external", "summary": "RHBZ#1340005", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340005" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1672", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1672" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1672", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1672" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: cross-origin bypass in extension bindings" }, { "cve": "CVE-2016-1673", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340006" } ], "notes": [ { "category": "description", "text": "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: cross-origin bypass in blink", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1673" }, { "category": "external", "summary": "RHBZ#1340006", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340006" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1673", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1673" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1673", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1673" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: cross-origin bypass in blink" }, { "cve": "CVE-2016-1674", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340007" } ], "notes": [ { "category": "description", "text": "The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: cross-origin bypass in extensions", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1674" }, { "category": "external", "summary": "RHBZ#1340007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340007" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1674", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1674" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1674", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1674" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: cross-origin bypass in extensions" }, { "cve": "CVE-2016-1675", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340008" } ], "notes": [ { "category": "description", "text": "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: cross-origin bypass in blink", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1675" }, { "category": "external", "summary": "RHBZ#1340008", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340008" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1675", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1675" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1675", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1675" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: cross-origin bypass in blink" }, { "cve": "CVE-2016-1676", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340009" } ], "notes": [ { "category": "description", "text": "extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: cross-origin bypass in extension bindings", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1676" }, { "category": "external", "summary": "RHBZ#1340009", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340009" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1676", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1676" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1676", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1676" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: cross-origin bypass in extension bindings" }, { "cve": "CVE-2016-1677", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340010" } ], "notes": [ { "category": "description", "text": "uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging \"type confusion.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: type confusion in v8", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1677" }, { "category": "external", "summary": "RHBZ#1340010", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340010" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1677", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1677" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1677", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1677" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: type confusion in v8" }, { "cve": "CVE-2016-1678", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340011" } ], "notes": [ { "category": "description", "text": "objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: heap overflow in v8", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1678" }, { "category": "external", "summary": "RHBZ#1340011", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340011" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1678", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1678" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1678", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1678" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: heap overflow in v8" }, { "cve": "CVE-2016-1679", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340012" } ], "notes": [ { "category": "description", "text": "The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: heap use-after-free in v8 bindings", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1679" }, { "category": "external", "summary": "RHBZ#1340012", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340012" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1679", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1679" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1679", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1679" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: heap use-after-free in v8 bindings" }, { "cve": "CVE-2016-1680", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340013" } ], "notes": [ { "category": "description", "text": "Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: heap use-after-free in skia", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1680" }, { "category": "external", "summary": "RHBZ#1340013", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340013" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1680", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1680" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1680", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1680" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: heap use-after-free in skia" }, { "cve": "CVE-2016-1681", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340014" } ], "notes": [ { "category": "description", "text": "Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: heap overflow in pdfium", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1681" }, { "category": "external", "summary": "RHBZ#1340014", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340014" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1681", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1681" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: heap overflow in pdfium" }, { "cve": "CVE-2016-1682", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340015" } ], "notes": [ { "category": "description", "text": "The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: csp bypass for serviceworker", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1682" }, { "category": "external", "summary": "RHBZ#1340015", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340015" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1682" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: csp bypass for serviceworker" }, { "cve": "CVE-2016-1683", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340016" } ], "notes": [ { "category": "description", "text": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: out-of-bounds access in libxslt", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1683" }, { "category": "external", "summary": "RHBZ#1340016", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340016" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1683", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1683" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1683", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1683" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: out-of-bounds access in libxslt" }, { "cve": "CVE-2016-1684", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340017" } ], "notes": [ { "category": "description", "text": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: integer overflow in libxslt", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1684" }, { "category": "external", "summary": "RHBZ#1340017", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1684", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1684" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1684", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1684" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: integer overflow in libxslt" }, { "cve": "CVE-2016-1685", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340018" } ], "notes": [ { "category": "description", "text": "core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: out-of-bounds read in pdfium", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1685" }, { "category": "external", "summary": "RHBZ#1340018", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340018" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1685", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1685" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1685", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1685" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: out-of-bounds read in pdfium" }, { "cve": "CVE-2016-1686", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340019" } ], "notes": [ { "category": "description", "text": "The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: out-of-bounds read in pdfium", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1686" }, { "category": "external", "summary": "RHBZ#1340019", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340019" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1686", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1686" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1686", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1686" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: out-of-bounds read in pdfium" }, { "cve": "CVE-2016-1687", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340021" } ], "notes": [ { "category": "description", "text": "The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: information leak in extensions", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1687" }, { "category": "external", "summary": "RHBZ#1340021", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340021" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1687", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1687" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1687", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1687" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: information leak in extensions" }, { "cve": "CVE-2016-1688", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340022" } ], "notes": [ { "category": "description", "text": "The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: out-of-bounds read in v8", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1688" }, { "category": "external", "summary": "RHBZ#1340022", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340022" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1688", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1688" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1688", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1688" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: out-of-bounds read in v8" }, { "cve": "CVE-2016-1689", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340023" } ], "notes": [ { "category": "description", "text": "Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: heap buffer overflow in media", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1689" }, { "category": "external", "summary": "RHBZ#1340023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340023" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1689", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1689" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1689", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1689" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: heap buffer overflow in media" }, { "cve": "CVE-2016-1690", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340024" } ], "notes": [ { "category": "description", "text": "The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1701.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: heap use-after-free in autofill", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1690" }, { "category": "external", "summary": "RHBZ#1340024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340024" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1690", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1690" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1690", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1690" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "chromium-browser: heap use-after-free in autofill" }, { "cve": "CVE-2016-1691", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340026" } ], "notes": [ { "category": "description", "text": "Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: heap buffer-overflow in skia", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1691" }, { "category": "external", "summary": "RHBZ#1340026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340026" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1691", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1691" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1691", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1691" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: heap buffer-overflow in skia" }, { "cve": "CVE-2016-1692", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340027" } ], "notes": [ { "category": "description", "text": "WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: limited cross-origin bypass in serviceworker", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1692" }, { "category": "external", "summary": "RHBZ#1340027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340027" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1692", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1692" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1692", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1692" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: limited cross-origin bypass in serviceworker" }, { "cve": "CVE-2016-1693", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340028" } ], "notes": [ { "category": "description", "text": "browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: http download of software removal tool", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1693" }, { "category": "external", "summary": "RHBZ#1340028", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340028" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1693", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1693" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1693", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1693" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: http download of software removal tool" }, { "cve": "CVE-2016-1694", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340029" } ], "notes": [ { "category": "description", "text": "browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: hpkp pins removed on cache clearance", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1694" }, { "category": "external", "summary": "RHBZ#1340029", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340029" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1694", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1694" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1694", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1694" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "chromium-browser: hpkp pins removed on cache clearance" }, { "cve": "CVE-2016-1695", "discovery_date": "2016-05-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1340030" } ], "notes": [ { "category": "description", "text": "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "chromium-browser: various fixes from internal audits", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-1695" }, { "category": "external", "summary": "RHBZ#1340030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340030" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1695", "url": "https://www.cve.org/CVERecord?id=CVE-2016-1695" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1695", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1695" }, { "category": "external", "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" } ], "release_date": "2016-05-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2016-06-01T10:50:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", "product_ids": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2016:1190" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:51.0.2704.63-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:51.0.2704.63-1.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "chromium-browser: various fixes from internal audits" } ] }
wid-sec-w-2023-1614
Vulnerability from csaf_certbund
Published
2023-06-29 22:00
Modified
2023-10-25 22:00
Summary
Tenable Security Nessus Network Monitor: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Tenable Nessus Network Monitor ist eine Lösung zur Inventarisierung und Überwachung von Netzwerkgeräten und den genutzten Protokollen.
Angriff
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.
Betroffene Betriebssysteme
- Sonstiges
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Tenable Nessus Network Monitor ist eine L\u00f6sung zur Inventarisierung und \u00dcberwachung von Netzwerkger\u00e4ten und den genutzten Protokollen.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1614 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1614.json" }, { "category": "self", "summary": "WID-SEC-2023-1614 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1614" }, { "category": "external", "summary": "Tenable Security Advisory TNS-2023-34 vom 2023-10-25", "url": "https://de.tenable.com/security/tns-2023-34" }, { "category": "external", "summary": "Tenable Security Advisory vom 2023-06-29", "url": "https://de.tenable.com/security/tns-2023-23" } ], "source_lang": "en-US", "title": "Tenable Security Nessus Network Monitor: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-10-25T22:00:00.000+00:00", "generator": { "date": "2024-02-15T17:33:55.765+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-1614", "initial_release_date": "2023-06-29T22:00:00.000+00:00", "revision_history": [ { "date": "2023-06-29T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-07-03T22:00:00.000+00:00", "number": "2", "summary": "Produkt berichtigt" }, { "date": "2023-10-25T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Tenable aufgenommen" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Tenable Security Nessus Network Monitor \u003c 6.2.2", "product": { "name": "Tenable Security Nessus Network Monitor \u003c 6.2.2", "product_id": "T028403", "product_identification_helper": { "cpe": "cpe:/a:tenable:nessus_network_monitor:6.2.2" } } } ], "category": "vendor", "name": "Tenable Security" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-32067", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-32067" }, { "cve": "CVE-2023-31147", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-31147" }, { "cve": "CVE-2023-31130", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-31130" }, { "cve": "CVE-2023-31124", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-31124" }, { "cve": "CVE-2023-29469", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-29469" }, { "cve": "CVE-2023-28484", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-28484" }, { "cve": "CVE-2023-28322", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-28322" }, { "cve": "CVE-2023-28321", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-28321" }, { "cve": "CVE-2023-28320", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-28320" }, { "cve": "CVE-2023-27538", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-27538" }, { "cve": "CVE-2023-27536", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-27536" }, { "cve": "CVE-2023-27535", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-27535" }, { "cve": "CVE-2023-27534", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-27534" }, { "cve": "CVE-2023-27533", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-27533" }, { "cve": "CVE-2023-2650", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-2650" }, { "cve": "CVE-2023-23916", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-23916" }, { "cve": "CVE-2023-23915", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-23915" }, { "cve": "CVE-2023-23914", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-23914" }, { "cve": "CVE-2023-1255", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-1255" }, { "cve": "CVE-2023-0466", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-0466" }, { "cve": "CVE-2023-0465", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2023-0465" }, { "cve": "CVE-2022-4904", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-4904" }, { "cve": "CVE-2022-46908", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-46908" }, { "cve": "CVE-2022-43552", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-43552" }, { "cve": "CVE-2022-43551", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-43551" }, { "cve": "CVE-2022-42916", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-42916" }, { "cve": "CVE-2022-42915", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-42915" }, { "cve": "CVE-2022-40304", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-40304" }, { "cve": "CVE-2022-40303", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-40303" }, { "cve": "CVE-2022-35737", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-35737" }, { "cve": "CVE-2022-35252", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-35252" }, { "cve": "CVE-2022-32221", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-32221" }, { "cve": "CVE-2022-32208", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-32208" }, { "cve": "CVE-2022-32207", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-32207" }, { "cve": "CVE-2022-32206", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-32206" }, { "cve": "CVE-2022-32205", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-32205" }, { "cve": "CVE-2022-31160", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-31160" }, { "cve": "CVE-2022-29824", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-29824" }, { "cve": "CVE-2022-27782", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-27782" }, { "cve": "CVE-2022-27781", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-27781" }, { "cve": "CVE-2022-27776", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-27776" }, { "cve": "CVE-2022-27775", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-27775" }, { "cve": "CVE-2022-27774", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-27774" }, { "cve": "CVE-2022-23395", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-23395" }, { "cve": "CVE-2022-23308", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-23308" }, { "cve": "CVE-2022-22576", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2022-22576" }, { "cve": "CVE-2021-45346", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-45346" }, { "cve": "CVE-2021-3672", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-3672" }, { "cve": "CVE-2021-36690", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-36690" }, { "cve": "CVE-2021-3541", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-3541" }, { "cve": "CVE-2021-3537", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-3537" }, { "cve": "CVE-2021-3518", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-3518" }, { "cve": "CVE-2021-3517", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-3517" }, { "cve": "CVE-2021-31239", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-31239" }, { "cve": "CVE-2021-30560", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-30560" }, { "cve": "CVE-2021-20227", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2021-20227" }, { "cve": "CVE-2020-9327", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-9327" }, { "cve": "CVE-2020-7595", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-7595" }, { "cve": "CVE-2020-35527", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-35527" }, { "cve": "CVE-2020-35525", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-35525" }, { "cve": "CVE-2020-24977", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-24977" }, { "cve": "CVE-2020-15358", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-15358" }, { "cve": "CVE-2020-14155", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-14155" }, { "cve": "CVE-2020-13871", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-13871" }, { "cve": "CVE-2020-13632", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-13632" }, { "cve": "CVE-2020-13631", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-13631" }, { "cve": "CVE-2020-13630", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-13630" }, { "cve": "CVE-2020-13435", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-13435" }, { "cve": "CVE-2020-13434", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-13434" }, { "cve": "CVE-2020-11656", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-11656" }, { "cve": "CVE-2020-11655", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2020-11655" }, { "cve": "CVE-2019-9937", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-9937" }, { "cve": "CVE-2019-9936", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-9936" }, { "cve": "CVE-2019-8457", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-8457" }, { "cve": "CVE-2019-5815", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-5815" }, { "cve": "CVE-2019-20838", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-20838" }, { "cve": "CVE-2019-20388", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-20388" }, { "cve": "CVE-2019-20218", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-20218" }, { "cve": "CVE-2019-19959", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19959" }, { "cve": "CVE-2019-19956", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19956" }, { "cve": "CVE-2019-19926", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19926" }, { "cve": "CVE-2019-19925", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19925" }, { "cve": "CVE-2019-19924", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19924" }, { "cve": "CVE-2019-19923", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19923" }, { "cve": "CVE-2019-19880", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19880" }, { "cve": "CVE-2019-19646", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19646" }, { "cve": "CVE-2019-19645", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19645" }, { "cve": "CVE-2019-19603", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19603" }, { "cve": "CVE-2019-19317", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19317" }, { "cve": "CVE-2019-19244", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19244" }, { "cve": "CVE-2019-19242", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-19242" }, { "cve": "CVE-2019-16168", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-16168" }, { "cve": "CVE-2019-13118", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-13118" }, { "cve": "CVE-2019-13117", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-13117" }, { "cve": "CVE-2019-12900", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-12900" }, { "cve": "CVE-2019-11068", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2019-11068" }, { "cve": "CVE-2018-9251", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2018-9251" }, { "cve": "CVE-2018-14567", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2018-14567" }, { "cve": "CVE-2018-14404", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2018-14404" }, { "cve": "CVE-2017-9050", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-9050" }, { "cve": "CVE-2017-9049", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-9049" }, { "cve": "CVE-2017-9048", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-9048" }, { "cve": "CVE-2017-9047", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-9047" }, { "cve": "CVE-2017-8872", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-8872" }, { "cve": "CVE-2017-7376", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-7376" }, { "cve": "CVE-2017-7375", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-7375" }, { "cve": "CVE-2017-5969", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-5969" }, { "cve": "CVE-2017-5130", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-5130" }, { "cve": "CVE-2017-5029", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-5029" }, { "cve": "CVE-2017-18258", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-18258" }, { "cve": "CVE-2017-16932", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-16932" }, { "cve": "CVE-2017-16931", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-16931" }, { "cve": "CVE-2017-15412", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-15412" }, { "cve": "CVE-2017-1000381", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-1000381" }, { "cve": "CVE-2017-1000061", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2017-1000061" }, { "cve": "CVE-2016-9598", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-9598" }, { "cve": "CVE-2016-9597", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-9597" }, { "cve": "CVE-2016-9596", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-9596" }, { "cve": "CVE-2016-5180", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-5180" }, { "cve": "CVE-2016-5131", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-5131" }, { "cve": "CVE-2016-4658", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-4658" }, { "cve": "CVE-2016-4609", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-4609" }, { "cve": "CVE-2016-4607", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-4607" }, { "cve": "CVE-2016-4483", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-4483" }, { "cve": "CVE-2016-4449", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-4449" }, { "cve": "CVE-2016-4448", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-4448" }, { "cve": "CVE-2016-4447", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-4447" }, { "cve": "CVE-2016-3709", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-3709" }, { "cve": "CVE-2016-3705", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-3705" }, { "cve": "CVE-2016-3627", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-3627" }, { "cve": "CVE-2016-3189", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-3189" }, { "cve": "CVE-2016-2073", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-2073" }, { "cve": "CVE-2016-1840", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1840" }, { "cve": "CVE-2016-1839", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1839" }, { "cve": "CVE-2016-1838", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1838" }, { "cve": "CVE-2016-1837", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1837" }, { "cve": "CVE-2016-1836", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1836" }, { "cve": "CVE-2016-1834", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1834" }, { "cve": "CVE-2016-1833", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1833" }, { "cve": "CVE-2016-1762", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1762" }, { "cve": "CVE-2016-1684", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1684" }, { "cve": "CVE-2016-1683", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2016-1683" }, { "cve": "CVE-2015-9019", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-9019" }, { "cve": "CVE-2015-8806", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-8806" }, { "cve": "CVE-2015-8710", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-8710" }, { "cve": "CVE-2015-8317", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-8317" }, { "cve": "CVE-2015-8242", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-8242" }, { "cve": "CVE-2015-8241", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-8241" }, { "cve": "CVE-2015-8035", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-8035" }, { "cve": "CVE-2015-7995", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-7995" }, { "cve": "CVE-2015-7942", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-7942" }, { "cve": "CVE-2015-7941", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-7941" }, { "cve": "CVE-2015-7500", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-7500" }, { "cve": "CVE-2015-7499", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-7499" }, { "cve": "CVE-2015-7498", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-7498" }, { "cve": "CVE-2015-7497", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-7497" }, { "cve": "CVE-2015-5312", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2015-5312" }, { "cve": "CVE-2014-3660", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2014-3660" }, { "cve": "CVE-2013-4520", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2013-4520" }, { "cve": "CVE-2013-2877", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2013-2877" }, { "cve": "CVE-2013-1969", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2013-1969" }, { "cve": "CVE-2013-0339", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2013-0339" }, { "cve": "CVE-2013-0338", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2013-0338" }, { "cve": "CVE-2012-6139", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2012-6139" }, { "cve": "CVE-2012-5134", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2012-5134" }, { "cve": "CVE-2012-2871", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2012-2871" }, { "cve": "CVE-2012-2870", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2012-2870" }, { "cve": "CVE-2012-0841", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2012-0841" }, { "cve": "CVE-2011-3970", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2011-3970" }, { "cve": "CVE-2011-1944", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2011-1944" }, { "cve": "CVE-2011-1202", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2011-1202" }, { "cve": "CVE-2010-4494", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2010-4494" }, { "cve": "CVE-2010-4008", "notes": [ { "category": "description", "text": "In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-06-29T22:00:00Z", "title": "CVE-2010-4008" } ] }
ghsa-872f-6g3v-r884
Vulnerability from github
Published
2022-05-17 02:37
Modified
2022-05-17 02:37
Severity ?
Details
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.
{ "affected": [], "aliases": [ "CVE-2016-1684" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2016-06-05T23:59:00Z", "severity": "HIGH" }, "details": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.", "id": "GHSA-872f-6g3v-r884", "modified": "2022-05-17T02:37:54Z", "published": "2022-05-17T02:37:54Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1684" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2016:1190" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017" }, { "type": "WEB", "url": "https://crbug.com/583171" }, { "type": "WEB", "url": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201607-07" }, { "type": "WEB", "url": "https://support.apple.com/HT206899" }, { "type": "WEB", "url": "https://support.apple.com/HT206901" }, { "type": "WEB", "url": "https://support.apple.com/HT206902" }, { "type": "WEB", "url": "https://support.apple.com/HT206903" }, { "type": "WEB", "url": "https://support.apple.com/HT206904" }, { "type": "WEB", "url": "https://support.apple.com/HT206905" }, { "type": "WEB", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" }, { "type": "WEB", "url": "http://www.debian.org/security/2016/dsa-3590" }, { "type": "WEB", "url": "http://www.debian.org/security/2016/dsa-3605" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/90876" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1035981" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2992-1" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
gsd-2016-1684
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2016-1684", "description": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.", "id": "GSD-2016-1684", "references": [ "https://www.suse.com/security/cve/CVE-2016-1684.html", "https://www.debian.org/security/2016/dsa-3605", "https://www.debian.org/security/2016/dsa-3590", "https://access.redhat.com/errata/RHSA-2016:1190", "https://ubuntu.com/security/CVE-2016-1684", "https://advisories.mageia.org/CVE-2016-1684.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2016-1684" ], "details": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.", "id": "GSD-2016-1684", "modified": "2023-12-13T01:21:25.103869Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security@google.com", "ID": "CVE-2016-1684", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://crbug.com/583171", "refsource": "CONFIRM", "url": "https://crbug.com/583171" }, { "name": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d", "refsource": "CONFIRM", "url": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d" }, { "name": "DSA-3605", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2016/dsa-3605" }, { "name": "90876", "refsource": "BID", "url": "http://www.securityfocus.com/bid/90876" }, { "name": "APPLE-SA-2016-07-18-4", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html" }, { "name": "APPLE-SA-2016-07-18-3", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html" }, { "name": "APPLE-SA-2016-07-18-2", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html" }, { "name": "openSUSE-SU-2016:1496", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" }, { "name": "https://support.apple.com/HT206901", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206901" }, { "name": "1035981", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1035981" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017" }, { "name": "DSA-3590", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2016/dsa-3590" }, { "name": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "refsource": "CONFIRM", "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" }, { "name": "USN-2992-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-2992-1" }, { "name": "openSUSE-SU-2016:1430", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" }, { "name": "APPLE-SA-2016-07-18-1", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html" }, { "name": "APPLE-SA-2016-07-18-6", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html" }, { "name": "RHSA-2016:1190", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2016:1190" }, { "name": "https://support.apple.com/HT206905", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206905" }, { "name": "https://support.apple.com/HT206903", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206903" }, { "name": "https://support.apple.com/HT206902", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206902" }, { "name": "https://support.apple.com/HT206904", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206904" }, { "name": "GLSA-201607-07", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201607-07" }, { "name": "openSUSE-SU-2016:1433", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" }, { "name": "https://support.apple.com/HT206899", "refsource": "CONFIRM", "url": "https://support.apple.com/HT206899" }, { "name": "FEDORA-2019-320d5295fc", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "50.0.2661.102", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.1.28", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "security@google.com", "ID": "CVE-2016-1684" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ] }, "references": { "reference_data": [ { "name": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d", "refsource": "CONFIRM", "tags": [], "url": "https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017", "refsource": "CONFIRM", "tags": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340017" }, { "name": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html", "refsource": "CONFIRM", "tags": [ "Vendor Advisory" ], "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html" }, { "name": "https://crbug.com/583171", "refsource": "CONFIRM", "tags": [], "url": "https://crbug.com/583171" }, { "name": "APPLE-SA-2016-07-18-4", "refsource": "APPLE", "tags": [], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html" }, { "name": "APPLE-SA-2016-07-18-1", "refsource": "APPLE", "tags": [], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html" }, { "name": "https://support.apple.com/HT206904", "refsource": "CONFIRM", "tags": [], "url": "https://support.apple.com/HT206904" }, { "name": "https://support.apple.com/HT206899", "refsource": "CONFIRM", "tags": [], "url": "https://support.apple.com/HT206899" }, { "name": "https://support.apple.com/HT206902", "refsource": "CONFIRM", "tags": [], "url": "https://support.apple.com/HT206902" }, { "name": "APPLE-SA-2016-07-18-2", "refsource": "APPLE", "tags": [], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html" }, { "name": "APPLE-SA-2016-07-18-6", "refsource": "APPLE", "tags": [], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html" }, { "name": "https://support.apple.com/HT206905", "refsource": "CONFIRM", "tags": [], "url": "https://support.apple.com/HT206905" }, { "name": "https://support.apple.com/HT206903", "refsource": "CONFIRM", "tags": [], "url": "https://support.apple.com/HT206903" }, { "name": "APPLE-SA-2016-07-18-3", "refsource": "APPLE", "tags": [], "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html" }, { "name": "https://support.apple.com/HT206901", "refsource": "CONFIRM", "tags": [], "url": "https://support.apple.com/HT206901" }, { "name": "USN-2992-1", "refsource": "UBUNTU", "tags": [], "url": "http://www.ubuntu.com/usn/USN-2992-1" }, { "name": "1035981", "refsource": "SECTRACK", "tags": [], "url": "http://www.securitytracker.com/id/1035981" }, { "name": "DSA-3590", "refsource": "DEBIAN", "tags": [], "url": "http://www.debian.org/security/2016/dsa-3590" }, { "name": "openSUSE-SU-2016:1496", "refsource": "SUSE", "tags": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html" }, { "name": "RHSA-2016:1190", "refsource": "REDHAT", "tags": [], "url": "https://access.redhat.com/errata/RHSA-2016:1190" }, { "name": "openSUSE-SU-2016:1430", "refsource": "SUSE", "tags": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html" }, { "name": "openSUSE-SU-2016:1433", "refsource": "SUSE", "tags": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html" }, { "name": "90876", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/90876" }, { "name": "DSA-3605", "refsource": "DEBIAN", "tags": [], "url": "http://www.debian.org/security/2016/dsa-3605" }, { "name": "GLSA-201607-07", "refsource": "GENTOO", "tags": [], "url": "https://security.gentoo.org/glsa/201607-07" }, { "name": "FEDORA-2019-320d5295fc", "refsource": "FEDORA", "tags": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 1.6, "impactScore": 5.9 } }, "lastModifiedDate": "2017-07-01T01:29Z", "publishedDate": "2016-06-05T23:59Z" } } }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.