Lucene search

K
gentooGentoo FoundationGLSA-201506-04
HistoryJun 23, 2015 - 12:00 a.m.

Chromium: Multiple vulnerabilities

2015-06-2300:00:00
Gentoo Foundation
security.gentoo.org
27

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.086

Percentile

94.6%

Background

Chromium is an open-source web browser project.

Description

Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker can cause arbitrary remote code execution, Denial of Service or bypass of security mechanisms.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=www-client/chromium-43.0.2357.65"
OSVersionArchitecturePackageVersionFilename
Gentooanyallwww-client/chromium< 43.0.2357.65UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.086

Percentile

94.6%