Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.5881.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-5881-1)
Summary:	The remote host is missing an update for the 'chromium-browser' package(s) announced via the USN-5881-1 advisory.
Description:	Summary: The remote host is missing an update for the 'chromium-browser' package(s) announced via the USN-5881-1 advisory. Vulnerability Insight: It was discovered that Chromium did not properly manage memory. A remote attacker could possibly use these issues to cause a denial of service or execute arbitrary code via a crafted HTML page. (CVE-2023-0471, CVE-2023-0472, CVE-2023-0473, CVE-2023-0696, CVE-2023-0698, CVE-2023-0699, CVE-2023-0702, CVE-2023-0705) It was discovered that Chromium did not properly manage memory. A remote attacker who convinced a user to install a malicious extension could possibly use this issue to corrupt memory via a Chrome web app. (CVE-2023-0474) It was discovered that Chromium contained an inappropriate implementation in the Download component. A remote attacker could possibly use this issue to spoof contents of the Omnibox (URL bar) via a crafted HTML page. (CVE-2023-0700) It was discovered that Chromium did not properly manage memory. A remote attacker who convinced a user to engage in specific UI interactions could possibly use these issues to cause a denial of service or execute arbitrary code. (CVE-2023-0701, CVE-2023-0703) It was discovered that Chromium insufficiently enforced policies. A remote attacker could possibly use this issue to bypass same origin policy and proxy settings via a crafted HTML page. (CVE-2023-0704) Affected Software/OS: 'chromium-browser' package(s) on Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-0471 https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html https://crbug.com/1376354 Common Vulnerability Exposure (CVE) ID: CVE-2023-0472 https://crbug.com/1405256 Common Vulnerability Exposure (CVE) ID: CVE-2023-0473 https://crbug.com/1404639 Common Vulnerability Exposure (CVE) ID: CVE-2023-0474 https://crbug.com/1400841 Common Vulnerability Exposure (CVE) ID: CVE-2023-0696 https://security.gentoo.org/glsa/202309-17 https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html https://crbug.com/1402270 Common Vulnerability Exposure (CVE) ID: CVE-2023-0698 https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1693 https://crbug.com/1403573 Common Vulnerability Exposure (CVE) ID: CVE-2023-0699 https://crbug.com/1371859 Common Vulnerability Exposure (CVE) ID: CVE-2023-0700 https://crbug.com/1393732 Common Vulnerability Exposure (CVE) ID: CVE-2023-0701 https://crbug.com/1405123 Common Vulnerability Exposure (CVE) ID: CVE-2023-0702 https://crbug.com/1316301 Common Vulnerability Exposure (CVE) ID: CVE-2023-0703 https://crbug.com/1405574 Common Vulnerability Exposure (CVE) ID: CVE-2023-0704 https://crbug.com/1385982 Common Vulnerability Exposure (CVE) ID: CVE-2023-0705 https://crbug.com/1238642
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.