Lucene search

FreeBSD15D398EA-4F73-11EF-8A0F-A8A1599412C6

HistoryJul 30, 2024 - 12:00 a.m.

chromium -- multiple security fixes

2024-07-3000:00:00

vuxml.freebsd.org

chromium

security fixes

uninitialized use

out of bounds read

insufficient data validation

webtransport

dawn

cve-2024-6990

cve-2024-7255

cve-2024-7256

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

26.9%

JSON

Chrome Releases reports:

This update includes 3 security fixes:

[353034820] Critical CVE-2024-6990: Uninitialized Use in Dawn. Reported by gelatin dessert on 2024-07-15
[352872238] High CVE-2024-7255: Out of bounds read in WebTransport. Reported by Marten Richter on 2024-07-13
[354748060] High CVE-2024-7256: Insufficient data validation in Dawn. Reported by gelatin dessert on 2024-07-23

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium< 127.0.6533.88UNKNOWN
FreeBSDanynoarchungoogled-chromium< 127.0.6533.88UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	chromium	< 127.0.6533.88	UNKNOWN
FreeBSD	any	noarch	ungoogled-chromium	< 127.0.6533.88	UNKNOWN

References

chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_30.html

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

26.9%

JSON

Related for 15D398EA-4F73-11EF-8A0F-A8A1599412C6