Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
archlinuxArchLinuxASA-202011-11
HistoryNov 17, 2020 - 12:00 a.m.

[ASA-202011-11] chromium: multiple issues

2020-11-1700:00:00
security.archlinux.org
66
chromium
multiple issues
arbitrary code execution
information disclosure
insufficient validation
access restriction bypass

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.002

Percentile

62.2%

JSON

Arch Linux Security Advisory ASA-202011-11

Severity: High
Date : 2020-11-17
CVE-ID : CVE-2020-16012 CVE-2020-16014 CVE-2020-16015 CVE-2020-16018
CVE-2020-16019 CVE-2020-16020 CVE-2020-16021 CVE-2020-16022
CVE-2020-16023 CVE-2020-16024 CVE-2020-16025 CVE-2020-16026
CVE-2020-16027 CVE-2020-16028 CVE-2020-16029 CVE-2020-16030
CVE-2020-16031 CVE-2020-16032 CVE-2020-16033 CVE-2020-16034
CVE-2020-16035 CVE-2020-16036
Package : chromium
Type : multiple issues
Remote : Yes
Link : https://security.archlinux.org/AVG-1277

Summary

The package chromium before version 87.0.4280.66-1 is vulnerable to
multiple issues including access restriction bypass, arbitrary code
execution, insufficient validation, content spoofing and information
disclosure.

Resolution

Upgrade to 87.0.4280.66-1.

pacman -Syu “chromium>=87.0.4280.66-1”

The problems have been fixed upstream in version 87.0.4280.66.

Workaround

None.

Description

  • CVE-2020-16012 (information disclosure)

An information disclosure issue has been found in Firefox before 83.0
and chromium before 87.0.4280.66. When drawing a transparent image on
top of an unknown cross-origin image, the Skia library drawImage
function took a variable amount of time depending on the content of the
underlying image. This resulted in potential cross-origin information
exposure of image content through timing side-channel attacks.

  • CVE-2020-16014 (arbitrary code execution)

A use after free security issue has been found in the PPAPI component
of the chromium browser before 87.0.4280.66.

  • CVE-2020-16015 (insufficient validation)

An insufficient data validation security issue has been found in the
WASM component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16018 (arbitrary code execution)

A use after free security issue has been found in the payments
component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16019 (access restriction bypass)

An inappropriate implementation security issue has been found in the
filesystem component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16020 (access restriction bypass)

An inappropriate implementation security issue has been found in the
cryptohome component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16021 (arbitrary code execution)

A race condition has been found in the ImageBurner component of the
chromium browser before 87.0.4280.66, leading to possible memory
corruption.

  • CVE-2020-16022 (access restriction bypass)

An insufficient policy enforcement security issue has been found in the
networking component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16023 (arbitrary code execution)

A use after free security issue has been found in the WebCodecs
component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16024 (arbitrary code execution)

A heap-based buffer overflow has been found in the UI component of the
chromium browser before 87.0.4280.66.

  • CVE-2020-16025 (arbitrary code execution)

A heap-based buffer overflow has been found in the clipboard component
of the chromium browser before 87.0.4280.66.

  • CVE-2020-16026 (arbitrary code execution)

A use after free security issue has been found in the WebRTC component
of the chromium browser before 87.0.4280.66.

  • CVE-2020-16027 (access restriction bypass)

An insufficient policy enforcement security issue has been found in the
developer tools component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16028 (arbitrary code execution)

A heap-based buffer overflow has been found in the WebRTC component of
the chromium browser before 87.0.4280.66.

  • CVE-2020-16029 (access restriction bypass)

An inappropriate implementation security issue has been found in the
PDFium component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16030 (insufficient validation)

An insufficient data validation security issue has been found in the
Blink component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16031 (content spoofing)

An incorrect security UI issue has been found in the tab preview
component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16032 (content spoofing)

An incorrect security UI issue has been found in the sharing component
of the chromium browser before 87.0.4280.66.

  • CVE-2020-16033 (content spoofing)

A incorrect security UI issue has been found in the WebUSB component of
the chromium browser before 87.0.4280.66.

  • CVE-2020-16034 (access restriction bypass)

An inappropriate implementation security issue has been found in the
WebRTC component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16035 (insufficient validation)

An insufficient data validation security issue has been found in the
cros-disks component of the chromium browser before 87.0.4280.66.

  • CVE-2020-16036 (access restriction bypass)

An inappropriate implementation security issue has been found in the
cookies component of the chromium browser before 87.0.4280.66.

Impact

A remote attacker might be able to trick a user into wrongly assessing
the security of a website, WebUSB connection or a tab preview via UI
spoofing. Further, a remote attacker may be able to bypass security
restrictions, access sensitive information and execute arbitrary code

References

https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/#CVE-2020-16012
https://bugzilla.mozilla.org/show_bug.cgi?id=1642028
https://crbug.com/1146675
https://crbug.com/1146673
https://crbug.com/1136078
https://crbug.com/1139408
https://crbug.com/1139411
https://crbug.com/1139414
https://crbug.com/1145680
https://crbug.com/1146761
https://crbug.com/1147430
https://crbug.com/1147431
https://crbug.com/1139153
https://crbug.com/1116444
https://crbug.com/1138446
https://crbug.com/1134338
https://crbug.com/1141350
https://crbug.com/1133183
https://crbug.com/1136714
https://crbug.com/1143057
https://crbug.com/1137362
https://crbug.com/1139409
https://crbug.com/830808
https://security.archlinux.org/CVE-2020-16012
https://security.archlinux.org/CVE-2020-16014
https://security.archlinux.org/CVE-2020-16015
https://security.archlinux.org/CVE-2020-16018
https://security.archlinux.org/CVE-2020-16019
https://security.archlinux.org/CVE-2020-16020
https://security.archlinux.org/CVE-2020-16021
https://security.archlinux.org/CVE-2020-16022
https://security.archlinux.org/CVE-2020-16023
https://security.archlinux.org/CVE-2020-16024
https://security.archlinux.org/CVE-2020-16025
https://security.archlinux.org/CVE-2020-16026
https://security.archlinux.org/CVE-2020-16027
https://security.archlinux.org/CVE-2020-16028
https://security.archlinux.org/CVE-2020-16029
https://security.archlinux.org/CVE-2020-16030
https://security.archlinux.org/CVE-2020-16031
https://security.archlinux.org/CVE-2020-16032
https://security.archlinux.org/CVE-2020-16033
https://security.archlinux.org/CVE-2020-16034
https://security.archlinux.org/CVE-2020-16035
https://security.archlinux.org/CVE-2020-16036

OSVersionArchitecturePackageVersionFilename
ArchLinuxanyanychromium< 87.0.4280.66-1UNKNOWN

References

Related

suse 6
nessus 10
fedora 2
kaspersky 1
openvas 2
chrome 1
gentoo 1
threatpost 1
prion 22
cvelist 21
redhatcve 21
debiancve 22
ubuntucve 22
cve 22
veracode 22
nvd 21
attackerkb 1
githubexploit 1
suse
suse
Security update for chromium (important)
2020-11-25 00:00:00
Security update for chromium (important)
2020-11-26 00:00:00
Security update for chromium (important)
2020-11-26 00:00:00
nessus
nessus
RHEL 6 : chromium-browser (Unpatched Vulnerability)
2024-06-03 00:00:00
Google Chrome < 87.0.4280.66 Multiple Vulnerabilities
2020-11-17 00:00:00
openSUSE Security Update : chromium (openSUSE-2020-2032)
2020-11-30 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: chromium-87.0.4280.66-1.fc33
2020-11-22 01:27:45
[SECURITY] Fedora 32 Update: chromium-87.0.4280.66-1.fc32
2020-11-24 01:23:14
kaspersky
kaspersky
KLA12009 Multiple vulnerabilities in Google Chrome
2020-11-17 00:00:00
openvas
openvas
Fedora: Security Advisory for chromium (FEDORA-2020-10ec8aca61)
2020-11-22 00:00:00
Fedora: Security Advisory for chromium (FEDORA-2020-3e005ce2e0)
2020-11-26 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2020-11-17 00:00:00
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2020-12-07 00:00:00
threatpost
threatpost
Google Chrome 87 Closes High-Severity 'NAT Slipstreaming' Hole
2020-11-18 17:37:45
prion
prion
Design/Logic Flaw
2021-01-08 19:15:00
Hardcoded credentials
2021-01-08 19:15:00
Input validation
2021-01-08 19:15:00
cvelist
cvelist
CVE-2020-16035
2021-01-08 17:53:30
CVE-2020-16030
2021-01-08 17:53:29
CVE-2020-16036
2021-01-08 17:53:30
redhatcve
redhatcve
CVE-2020-16033
2020-11-18 18:40:03
CVE-2020-16031
2020-11-18 18:39:58
CVE-2020-16026
2020-11-18 18:39:28
debiancve
debiancve
CVE-2020-16022
2021-01-08 19:15:13
CVE-2020-16024
2021-01-08 19:15:13
CVE-2020-16015
2021-01-08 19:15:12
ubuntucve
ubuntucve
CVE-2020-16023
2021-01-08 00:00:00
CVE-2020-16029
2021-01-08 00:00:00
CVE-2020-16034
2021-01-08 00:00:00
cve
cve
CVE-2020-16029
2021-01-08 19:15:13
CVE-2020-16034
2021-01-08 19:15:13
CVE-2020-16019
2021-01-08 19:15:12
veracode
veracode
Cryptographic Issues
2020-12-21 18:51:26
Arbitrary Code Execution
2020-12-21 18:51:20
Arbitrary Code Execution
2020-12-21 18:51:23
nvd
nvd
CVE-2020-16033
2021-01-08 19:15:13
CVE-2020-16031
2021-01-08 19:15:13
CVE-2020-16035
2021-01-08 19:15:13
attackerkb
attackerkb
CVE-2020-16027
2021-01-08 00:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Google Chrome
2020-11-14 21:32:15

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.002

Percentile

62.2%

JSON
Related for ASA-202011-11
suse6nessus10fedora2kaspersky1openvas2chrome1gentoo1threatpost1prion22cvelist21redhatcve21debiancve22ubuntucve22cve22veracode22nvd21attackerkb1githubexploit1