Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
archlinuxArchLinuxASA-202103-8
HistoryMar 13, 2021 - 12:00 a.m.

[ASA-202103-8] opera: arbitrary code execution

2021-03-1300:00:00
security.archlinux.org
181

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

0.008 Low

EPSS

Percentile

82.0%

JSON

Arch Linux Security Advisory ASA-202103-8

Severity: High
Date : 2021-03-13
CVE-ID : CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152
CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156
CVE-2021-21157
Package : opera
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-1586

Summary

The package opera before version 74.0.3911.203-1 is vulnerable to
arbitrary code execution.

Resolution

Upgrade to 74.0.3911.203-1.

pacman -Syu “opera>=74.0.3911.203-1”

The problems have been fixed upstream in version 74.0.3911.203.

Workaround

None.

Description

  • CVE-2021-21149 (arbitrary code execution)

A stack overflow security issue was found in the Data Transfer
component of the Chromium browser before version 88.0.4324.182.

  • CVE-2021-21150 (arbitrary code execution)

A use after free security issue was found in the Downloads component of
the Chromium browser before version 88.0.4324.182.

  • CVE-2021-21151 (arbitrary code execution)

A use after free security issue was found in the Payments component of
the Chromium browser before version 88.0.4324.182.

  • CVE-2021-21152 (arbitrary code execution)

A heap buffer overflow security issue was found in the Media component
of the Chromium browser before version 88.0.4324.182.

  • CVE-2021-21153 (arbitrary code execution)

A stack overflow security issue was found in the GPU Process component
of the Chromium browser before version 88.0.4324.182.

  • CVE-2021-21154 (arbitrary code execution)

A heap buffer overflow security issue was found in the Tab Strip
component of the Chromium browser before version 88.0.4324.182.

  • CVE-2021-21155 (arbitrary code execution)

A heap buffer overflow security issue was found in the Tab Strip
component of the Chromium browser before version 88.0.4324.182.

  • CVE-2021-21156 (arbitrary code execution)

A heap buffer overflow security issue was found in the V8 component of
the Chromium browser before version 88.0.4324.182.

  • CVE-2021-21157 (arbitrary code execution)

A use after free security issue was found in the Web Sockets component
of the Chromium browser before version 88.0.4324.182.

Impact

A remote attacker might be able to execute arbitrary code on the
affected host.

References

https://blogs.opera.com/desktop/changelog-for-74/
https://blogs.opera.com/desktop/2021/03/opera-74-0-3911-203-stable-update/
https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html
https://crbug.com/1138143
https://crbug.com/1172192
https://crbug.com/1165624
https://crbug.com/1166504
https://crbug.com/1155974
https://crbug.com/1173269
https://crbug.com/1177341
https://crbug.com/1170657
https://security.archlinux.org/CVE-2021-21149
https://security.archlinux.org/CVE-2021-21150
https://security.archlinux.org/CVE-2021-21151
https://security.archlinux.org/CVE-2021-21152
https://security.archlinux.org/CVE-2021-21153
https://security.archlinux.org/CVE-2021-21154
https://security.archlinux.org/CVE-2021-21155
https://security.archlinux.org/CVE-2021-21156
https://security.archlinux.org/CVE-2021-21157

OSVersionArchitecturePackageVersionFilename
ArchLinuxanyanyopera< 74.0.3911.203-1UNKNOWN

Related

freebsd 1
nessus 10
kaspersky 3
openvas 10
chrome 1
fedora 2
suse 5
osv 1
debian 1
mscve 9
debiancve 9
cvelist 9
veracode 9
ubuntucve 9
cve 9
alpinelinux 6
nvd 9
prion 9
checkpoint_advisories 1
redhatcve 1
mageia 1
gentoo 1
freebsd
freebsd
chromium -- multiple vulnerabilities
2021-02-16 00:00:00
nessus
nessus
Microsoft Edge (Chromium) < 88.0.705.74 Multiple Vulnerabilities
2021-02-19 00:00:00
FreeBSD : chromium -- multiple vulnerabilities (48514901-711d-11eb-9846-e09467587c17)
2021-02-18 00:00:00
Google Chrome < 88.0.4324.182 Multiple Vulnerabilities
2021-02-16 00:00:00
kaspersky
kaspersky
KLA12180 Multiple vulnerabilities in Opera
2021-03-04 00:00:00
KLA12093 Multiple vulnerabilities in Microsoft Browser
2021-02-17 00:00:00
KLA12089 Multiple vulnerabilities in Google Chrome
2021-02-16 00:00:00
openvas
openvas
Fedora: Security Advisory for chromium (FEDORA-2021-aa764a8531)
2021-03-01 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_16-2021-02) - Linux
2021-02-23 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_16-2021-02) - Windows
2021-02-23 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2021-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: chromium-88.0.4324.182-1.fc33
2021-02-28 17:27:09
[SECURITY] Fedora 32 Update: chromium-89.0.4389.82-1.fc32
2021-03-20 01:15:37
suse
suse
Security update for opera (important)
2021-03-16 00:00:00
Security update for chromium (important)
2021-03-10 00:00:00
Security update for chromium (important)
2021-03-08 00:00:00
osv
osv
chromium - security update
2021-02-19 00:00:00
debian
debian
[SECURITY] [DSA 4858-1] chromium security update
2021-02-20 02:29:52
mscve
mscve
Chromium: CVE-2021-21150 Use after free in Downloads
2021-02-17 23:31:00
Chromium CVE-2021-21155: Heap buffer overflow in Tab Strip
2021-02-17 23:44:12
Chromium: CVE-2021-21154 Heap buffer overflow in Tab Strip
2021-02-17 23:40:38
debiancve
debiancve
CVE-2021-21150
2021-02-22 22:15:12
CVE-2021-21156
2021-02-22 22:15:12
CVE-2021-21154
2021-02-22 22:15:12
cvelist
cvelist
CVE-2021-21153
2021-02-22 21:20:35
CVE-2021-21155
2021-02-22 21:20:36
CVE-2021-21156
2021-02-22 21:20:37
veracode
veracode
Remote Code Execution (RCE)
2021-02-19 01:24:36
Arbitrary Code Execution
2021-02-19 01:24:35
Denial Of Service (DoS)
2021-02-19 01:24:40
ubuntucve
ubuntucve
CVE-2021-21156
2021-02-22 00:00:00
CVE-2021-21149
2021-02-22 00:00:00
CVE-2021-21150
2021-02-22 00:00:00
cve
cve
CVE-2021-21154
2021-02-22 22:15:12
CVE-2021-21150
2021-02-22 22:15:12
CVE-2021-21149
2021-02-22 22:15:12
alpinelinux
alpinelinux
CVE-2021-21150
2021-02-22 22:15:12
CVE-2021-21153
2021-02-22 22:15:12
CVE-2021-21156
2021-02-22 22:15:12
nvd
nvd
CVE-2021-21149
2021-02-22 22:15:12
CVE-2021-21152
2021-02-22 22:15:12
CVE-2021-21153
2021-02-22 22:15:12
prion
prion
Heap overflow
2021-02-22 22:15:00
Design/Logic Flaw
2021-02-22 22:15:00
Stack overflow
2021-02-22 22:15:00
checkpoint_advisories
checkpoint_advisories
Google Chrome Buffer Overflow (CVE-2021-21153)
2021-05-31 00:00:00
redhatcve
redhatcve
CVE-2021-21152
2022-05-20 23:00:17
mageia
mageia
Updated qtwebengine5 packages fix security vulnerabilities
2021-08-15 11:38:04
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2021-04-30 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

0.008 Low

EPSS

Percentile

82.0%

JSON
Related for ASA-202103-8
freebsd1nessus10kaspersky3openvas10chrome1fedora2suse5osv1debian1mscve9debiancve9cvelist9veracode9ubuntucve9cve9alpinelinux6nvd9prion9checkpoint_advisories1redhatcve1mageia1gentoo1