Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Summary

Product

Vulnerabilities 5

• High 8.8
  CVE-2024-1059

  Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exp…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 30, 2024
• High 8.8
  CVE-2024-1060

  Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 30, 2024
• High 8.8
  CVE-2024-1077

  Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Jan 30, 2024
• High 8.8
  CVE-2024-3169

  Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap cor…

  Google Chrome chromium Browsers Debian
  Jul 16, 2024
• Medium 6.3
  CVE-2024-2884

  Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out …

  Google Chrome chromium Browsers Debian
  Jul 16, 2024

Revision history

1. 2024-07-21 #9

   CVE's ergänzt

2. 2024-05-05 #8

   Neue Updates von Gentoo aufgenommen

3. 2024-03-25 #7

   Neue Updates von IGEL aufgenommen

4. 2024-02-18 #6

   Neue Updates von Gentoo aufgenommen

5. 2024-02-08 #5

   Neue Updates von Fedora aufgenommen

6. 2024-02-04 #4

   Neue Updates von Fedora aufgenommen

7. 2024-02-01 #3

   Neue Updates von Fedora und Debian aufgenommen

8. 2024-01-31 #2

   Neue Updates von Fedora aufgenommen

9. 2024-01-30 #1

   Initiale Fassung

References

• Stable Channel Update for Desktop vom 2024-01-30
  http://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
• Fedora Security Advisory FEDORA-2024-87E0BAECB6 vom 2024-02-01
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-87e0baecb6
• Fedora Security Advisory FEDORA-2024-CA36DCC1D3 vom 2024-02-01
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-ca36dcc1d3
• Fedora Security Advisory FEDORA-EPEL-2024-2DD0EF9006 vom 2024-02-01
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-2dd0ef9006
• Fedora Security Advisory FEDORA-EPEL-2024-44E34A2F20 vom 2024-02-01
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-44e34a2f20
• Debian Security Advisory DSA-5612 vom 2024-02-01
  https://lists.debian.org/debian-security-announce/2024/msg00019.html
• Gentoo Linux Security Advisory GLSA-202402-23 vom 2024-02-19
  https://security.gentoo.org/glsa/202402-23
• Fedora Security Advisory FEDORA-EPEL-2024-25F8BAC8AA vom 2024-02-03
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-25f8bac8aa
• Fedora Security Advisory FEDORA-EPEL-2024-96EE75B9FE vom 2024-02-09
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-96ee75b9fe
• IGEL Security Notice ISN-2024-07 vom 2024-03-25
  https://kb.igel.com/securitysafety/en/isn-2024-07-chromium-vulnerabilities-119870009.html
• Gentoo Linux Security Advisory GLSA-202405-14 vom 2024-05-05
  https://security.gentoo.org/glsa/202405-14