DSA-2930-1: Chromium-browser - Security Update
Summary
DSA-2930-1: chromium-browser - security update. Affects chromium-browser versions < 34.0.1847.137-1~deb7u1. Fixed in 34.0.1847.137-1~deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Chromium-browser is a web browser developed by the Chromium project, which serves as the open-source base for Google Chrome. It provides users with a fast and secure browsing experience, incorporating various features and technologies. However, a security vulnerability has been discovered in the chromium web browser.
Vulnerability Detail
The vulnerability, identified as CVE-2014-1740, CVE-2014-1741, and CVE-2014-1742, encompasses multiple issues within the chromium browser:
- CVE-2014-1740: A use-after-free issue in chromium's WebSockets implementation, discovered by Collin Payne.
- CVE-2014-1741: Multiple integer overflow issues in the Blink/Webkit document object model implementation, discovered by John Butler.
- CVE-2014-1742: A use-after-free issue in the Blink/Webkit text editing feature, discovered by cloudfuzzer.
These vulnerabilities could potentially lead to various security risks, including remote code execution, information disclosure, and denial of service attacks.
How To Fix
Minimum fixed version
34.0.1847.137-1~deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade chromium-browserTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the chromium-browser has been found to contain multiple vulnerabilities that could lead to severe security risks. It is crucial to update your chromium-browser packages to the recommended versions to mitigate these vulnerabilities. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for chromium-browser →
FAQ
Chromium-browser is an open-source web browser project that serves as the foundation for Google Chrome. It offers users a fast and secure browsing experience.
This security update addresses three vulnerabilities: CVE-2014-1740, CVE-2014-1741, and CVE-2014-1742. These vulnerabilities involve use-after-free issues and integer overflow issues in the chromium browser's WebSockets, Blink/Webkit document object model, and text editing feature, respectively.
The identified vulnerabilities could potentially allow remote code execution, information disclosure, and denial of service attacks. Exploiting these vulnerabilities may result in unauthorized access to sensitive information or the compromise of the affected system.
To fix these vulnerabilities, it is recommended to upgrade your chromium-browser packages to version 34.0.1847.137-1~deb7u1 for the stable distribution (wheezy). For other distributions, follow the provided update instructions or wait for the upcoming fixes.
You can find more information about these vulnerabilities in the Debian Security Advisory DSA-2930-1. Refer to the provided CVE identifiers (CVE-2014-1740, CVE-2014-1741, and CVE-2014-1742) for detailed vulnerability reports.
Related vulnerabilities
Recent vulnerabilities recorded for chromium-browser.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
