February 2021 - Arch-security - lists.archlinux.org

[ASA-202102-12] docker: multiple issues
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-12 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-21284 CVE-2021-21285 Package : docker Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1528 Summary ======= The package docker before version 1:20.10.3-1 is vulnerable to multiple issues including denial of service and privilege escalation. Resolution ========== Upgrade to 1:20.10.3-1. # pacman -Syu "docker>=1:20.10.3-1" The problems have been fixed upstream in version 20.10.3. Workaround ========== None. Description =========== - CVE-2021-21284 (privilege escalation) In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using "--userns-remap", if the root user in the remapped namespace has access to the host filesystem they can modify files under "/var/lib/docker/<remapping>" that cause writing files with extended privileges. Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user. - CVE-2021-21285 (denial of service) In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing. Impact ====== An attacker could crash the dockerd daemon via a crafted image. An attacker with root access inside a docker container can escape the container. References ========== https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc https://github.com/moby/moby/commit/edb62a3ace8c4303822a391b38231e577f8c2ee8 https://github.com/moby/moby/commit/bfedd2725971303efb7a2fe5d6990317b381622f https://github.com/moby/moby/commit/e908cc39018c015084ffbffbc5703ccba5c2fbb7 https://github.com/moby/moby/security/advisories/GHSA-6fj5-m822-rqx8 https://github.com/moby/moby/commit/a7d4af84bd2f189b921c3ec60796aa825e3a0f2a https://security.archlinux.org/CVE-2021-21284 https://security.archlinux.org/CVE-2021-21285

1 0

[ASA-202102-11] gitlab: information disclosure
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-11 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-22172 Package : gitlab Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1521 Summary ======= The package gitlab before version 13.8.2-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 13.8.2-1. # pacman -Syu "gitlab>=13.8.2-1" The problem has been fixed upstream in version 13.8.2. Workaround ========== None. Description =========== Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page. The issue is fixed in versions 13.8.2, 13.7.6 and 13.6.6. Impact ====== A guest user can view tag data that should be inaccessible on the releases page of a private project. References ========== https://about.gitlab.com/blog/2021/02/01/security-release-gitlab-13-8-2-rel… https://about.gitlab.com/blog/2021/02/01/security-release-gitlab-13-8-2-rel… https://gitlab.com/gitlab-org/gitlab-foss/-/commit/41b1c0469dba622a1c2c67c1… https://security.archlinux.org/CVE-2021-22172

1 0

[ASA-202102-10] minio: directory traversal
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-10 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-21287 Package : minio Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1520 Summary ======= The package minio before version 2021.01.30-1 is vulnerable to directory traversal. Resolution ========== Upgrade to 2021.01.30-1. # pacman -Syu "minio>=2021.01.30-1" The problem has been fixed upstream in version 2021.01.30. Workaround ========== The browser front-end can be disabled with the "MINIO_BROWSER=off" environment variable. Description =========== In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server- side request forgery vulnerability. The target application may have functionality for importing data from a URL, publishing data to a URL, or otherwise reading data from a URL that can be tampered with. The attacker modifies the calls to this functionality by supplying a completely different URL or by manipulating how URLs are built (path traversal etc.). In a Server-Side Request Forgery (SSRF) attack, the attacker can abuse functionality on the server to read or update internal resources. The attacker can supply or modify a URL which the code running on the server will read or submit data, and by carefully selecting the URLs, the attacker may be able to read server configuration such as AWS metadata, connect to internal services like HTTP enabled databases, or perform post requests towards internal services which are not intended to be exposed. This is fixed in version RELEASE.2021-01-30T00-20-58Z, all users are advised to upgrade. As a workaround you can disable the browser front-end with the "MINIO_BROWSER=off" environment variable. Impact ====== A remote attacker can exploit a server-side request forgery vulnerability to bypass security measures, access sensitive information and perform privileged actions. References ========== https://github.com/minio/minio/security/advisories/GHSA-m4qq-5f7c-693q https://github.com/minio/minio/pull/11337 https://github.com/minio/minio/commit/eb6871ecd960d570f70698877209e6db181bf… https://security.archlinux.org/CVE-2021-21287

1 0

[ASA-202102-9] ansible: information disclosure
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-9 ========================================= Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-20178 CVE-2021-20180 CVE-2021-20191 Package : ansible Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1437 Summary ======= The package ansible before version 2.10.7-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 2.10.7-1. # pacman -Syu "ansible>=2.10.7-1" The problems have been fixed upstream in version 2.10.7. Workaround ========== None. Description =========== - CVE-2021-20178 (information disclosure) A flaw was found in Ansible before version 2.10.6 where the 'authkey' and 'privkey' credentials are disclosed by default and not protected by no_log feature when using the snmp_facts module. Attackers could take advantage of this information to steal the SNMP credentials. - CVE-2021-20180 (information disclosure) A flaw was found in Ansible before version 2.10.6 where credentials such as secrets are being disclosed in console log by default and not protected by secured feature when using bitbucket_pipeline_variable module. An attacker can take advantage of this information to steal bitbucket_pipeline credentials. - CVE-2021-20191 (information disclosure) A flaw was found in ansible-collection where credentials such as secrets are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. Impact ====== A local attacker can access sensitive information like credentials and keys. References ========== https://bugzilla.redhat.com/show_bug.cgi?id=1914774 https://github.com/ansible-collections/community.general/pull/1621 https://github.com/ansible-collections/community.general/commit/fa2d2d6971d… https://bugzilla.redhat.com/show_bug.cgi?id=1915808 https://github.com/ansible-collections/community.general/pull/1635 https://github.com/ansible-collections/community.general/commit/a3f08377b20… https://bugzilla.redhat.com/show_bug.cgi?id=1916813 https://github.com/ansible-collections/cisco.nxos/pull/227 https://github.com/ansible-collections/cisco.nxos/commit/120956963f47502151… https://security.archlinux.org/CVE-2021-20178 https://security.archlinux.org/CVE-2021-20180 https://security.archlinux.org/CVE-2021-20191

1 0

[ASA-202102-8] opendoas: privilege escalation
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-8 ========================================= Severity: High Date : 2021-02-06 CVE-ID : CVE-2019-25016 Package : opendoas Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1504 Summary ======= The package opendoas before version 6.8.1-2 is vulnerable to privilege escalation. Resolution ========== Upgrade to 6.8.1-2. # pacman -Syu "opendoas>=6.8.1-2" The problem has been fixed upstream in version 6.8.1. Workaround ========== None. Description =========== A security issue has been found in OpenDoas before 6.8.1, where rules that allowed the user to execute any command would inherit the executing user's PATH instead of resetting it to a default PATH. Rules that limit the user to execute only a specific command are not affected by this and are only executed from the default PATH and with the PATH environment variable set to the safe default. Impact ====== A local user might be able to escalate privileges. References ========== https://github.com/Duncaen/OpenDoas/releases/tag/v6.8.1 https://github.com/Duncaen/OpenDoas/issues/45 https://github.com/Duncaen/OpenDoas/commit/d5acd52e2a15c36a8e06f9103d356229… https://gitlab.alpinelinux.org/alpine/aports/-/blob/9e259950190c924b4a17825… https://security.archlinux.org/CVE-2019-25016

1 0

[ASA-202102-7] nextcloud: directory traversal
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-7 ========================================= Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2020-36193 Package : nextcloud Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1464 Summary ======= The package nextcloud before version 20.0.6-1 is vulnerable to directory traversal. Resolution ========== Upgrade to 20.0.6-1. # pacman -Syu "nextcloud>=20.0.6-1" The problem has been fixed upstream in version 20.0.6. Workaround ========== None. Description =========== Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. Impact ====== A remote attacker might be able to write files in arbitrary file system locations by uploading a crafted archive file that leads to directory traversal. References ========== https://pear.php.net/bugs/bug.php?id=27008 https://github.com/pear/Archive_Tar/commit/cde460582ff389404b5b3ccb59374e9b… https://github.com/nextcloud/3rdparty/commit/87062377878054f58d62f6b1853ed6… https://github.com/nextcloud/3rdparty/commit/4f95d388e0888c130316c2a21f160d… https://security.archlinux.org/CVE-2020-36193

1 0

[ASA-202102-6] chromium: multiple issues
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-6 ========================================= Severity: Critical Date : 2021-02-06 CVE-ID : CVE-2021-21142 CVE-2021-21143 CVE-2021-21144 CVE-2021-21145 CVE-2021-21146 CVE-2021-21147 CVE-2021-21148 Package : chromium Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1525 Summary ======= The package chromium before version 88.0.4324.150-1 is vulnerable to multiple issues including arbitrary code execution and incorrect calculation. Resolution ========== Upgrade to 88.0.4324.150-1. # pacman -Syu "chromium>=88.0.4324.150-1" The problems have been fixed upstream in version 88.0.4324.150. Workaround ========== None. Description =========== - CVE-2021-21142 (arbitrary code execution) A use after free security issue was found in the Payments component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21143 (arbitrary code execution) A heap buffer overflow security issue was found in the Extensions component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21144 (arbitrary code execution) A heap buffer overflow security issue was found in the Tab Groups component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21145 (arbitrary code execution) A use after free security issue was found in the Fonts component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21146 (arbitrary code execution) A use after free security issue was found in the Navigation component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21147 (incorrect calculation) An inappropriate implementation security issue was found in the Skia component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21148 (arbitrary code execution) A heap buffer overflow security issue was found in the V8 component of the Chromium browser before version 88.0.4324.150. Impact ====== A remote attacker might be able to bypass security measures or execute arbitrary code. References ========== https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-des… https://crbug.com/1169317 https://crbug.com/1163504 https://crbug.com/1163845 https://crbug.com/1154965 https://crbug.com/1161705 https://crbug.com/1162942 https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-des… https://crbug.com/1170176 https://security.archlinux.org/CVE-2021-21142 https://security.archlinux.org/CVE-2021-21143 https://security.archlinux.org/CVE-2021-21144 https://security.archlinux.org/CVE-2021-21145 https://security.archlinux.org/CVE-2021-21146 https://security.archlinux.org/CVE-2021-21147 https://security.archlinux.org/CVE-2021-21148

1 0

[ASA-202102-5] opera: multiple issues
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-5 ========================================= Severity: Critical Date : 2021-02-06 CVE-ID : CVE-2020-16044 CVE-2021-21117 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21124 CVE-2021-21125 CVE-2021-21126 CVE-2021-21127 CVE-2021-21128 CVE-2021-21129 CVE-2021-21130 CVE-2021-21131 CVE-2021-21132 CVE-2021-21133 CVE-2021-21134 CVE-2021-21135 CVE-2021-21136 CVE-2021-21137 CVE-2021-21138 CVE-2021-21139 CVE-2021-21140 CVE-2021-21141 Package : opera Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1479 Summary ======= The package opera before version 74.0.3911.75-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation, content spoofing and incorrect calculation. Resolution ========== Upgrade to 74.0.3911.75-1. # pacman -Syu "opera>=74.0.3911.75-1" The problems have been fixed upstream in version 74.0.3911.75. Workaround ========== None. Description =========== - CVE-2020-16044 (arbitrary code execution) A security issue was found in Firefox before 84.0.2, Thunderbird before 78.6.1 and Chromium before 88.0.4324.96. A malicious peer could have modified a COOKIE-ECHO chunk in an SCTP packet in a way that potentially resulted in a use-after-free. Mozilla presumes that with enough effort it could have been exploited to run arbitrary code. - CVE-2021-21117 (insufficient validation) An insufficient policy enforcement security issue was found in the Cryptohome component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21118 (insufficient validation) An insufficient data validation security issue was found in the V8 component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21119 (arbitrary code execution) A use after free security issue was found in the Media component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21120 (arbitrary code execution) A use after free security issue was found in the WebSQL component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21121 (arbitrary code execution) A use after free security issue was found in the Omnibox component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21122 (arbitrary code execution) A use after free security issue was found in the Blink component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21123 (insufficient validation) An insufficient data validation security issue was found in the File System component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21124 (arbitrary code execution) A potential use after free security issue was found in the Speech Recognizer component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21125 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21126 (insufficient validation) An insufficient policy enforcement security issue was found in the extensions component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21127 (insufficient validation) An insufficient policy enforcement security issue was found in the extensions component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21128 (arbitrary code execution) A heap buffer overflow security issue was found in the Blink component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21129 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21130 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21131 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21132 (incorrect calculation) An inappropriate implementation security issue was found in the DevTools component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21133 (insufficient validation) An insufficient policy enforcement security issue was found in the Downloads component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21134 (content spoofing) An incorrect security UI security issue was found in the Page Info component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21135 (incorrect calculation) An inappropriate implementation security issue was found in the Performance API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21136 (insufficient validation) An insufficient policy enforcement security issue was found in the WebView component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21137 (incorrect calculation) An inappropriate implementation security issue was found in the DevTools component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21138 (arbitrary code execution) A use after free security issue was found in the DevTools component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21139 (incorrect calculation) An inappropriate implementation security issue was found in the iframe sandbox component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21140 (arbitrary code execution) An uninitialized use security issue was found in the USB component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21141 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. Impact ====== A remote attacker might be able to bypass security measures, trick the user into performing unwanted actions or execute arbitrary code. References ========== https://blogs.opera.com/desktop/2021/02/opera-74-stable/ https://www.mozilla.org/en-US/security/advisories/mfsa2021-01/#CVE-2020-160… https://bugzilla.mozilla.org/show_bug.cgi?id=1683964 https://hg.mozilla.org/mozilla-central/rev/08ba03dc8d4420e04e7c77fee3013e68… https://hg.mozilla.org/mozilla-central/rev/8c09f4813fc7e8f44605b6092262199b… https://hg.mozilla.org/mozilla-central/rev/5991645a87d2abf289686d09d943229c… https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-des… https://crbug.com/1137179 https://crbug.com/1161357 https://crbug.com/1160534 https://crbug.com/1160602 https://crbug.com/1161143 https://crbug.com/1162131 https://crbug.com/1137247 https://crbug.com/1131346 https://crbug.com/1152327 https://crbug.com/1108126 https://crbug.com/1115590 https://crbug.com/1138877 https://crbug.com/1140403 https://crbug.com/1140410 https://crbug.com/1140417 https://crbug.com/1128206 https://crbug.com/1157743 https://crbug.com/1157800 https://crbug.com/1157818 https://crbug.com/1038002 https://crbug.com/1093791 https://crbug.com/1122487 https://crbug.com/937131 https://crbug.com/1136327 https://crbug.com/1140435 https://security.archlinux.org/CVE-2020-16044 https://security.archlinux.org/CVE-2021-21117 https://security.archlinux.org/CVE-2021-21118 https://security.archlinux.org/CVE-2021-21119 https://security.archlinux.org/CVE-2021-21120 https://security.archlinux.org/CVE-2021-21121 https://security.archlinux.org/CVE-2021-21122 https://security.archlinux.org/CVE-2021-21123 https://security.archlinux.org/CVE-2021-21124 https://security.archlinux.org/CVE-2021-21125 https://security.archlinux.org/CVE-2021-21126 https://security.archlinux.org/CVE-2021-21127 https://security.archlinux.org/CVE-2021-21128 https://security.archlinux.org/CVE-2021-21129 https://security.archlinux.org/CVE-2021-21130 https://security.archlinux.org/CVE-2021-21131 https://security.archlinux.org/CVE-2021-21132 https://security.archlinux.org/CVE-2021-21133 https://security.archlinux.org/CVE-2021-21134 https://security.archlinux.org/CVE-2021-21135 https://security.archlinux.org/CVE-2021-21136 https://security.archlinux.org/CVE-2021-21137 https://security.archlinux.org/CVE-2021-21138 https://security.archlinux.org/CVE-2021-21139 https://security.archlinux.org/CVE-2021-21140 https://security.archlinux.org/CVE-2021-21141

1 0

[ASA-202102-4] vivaldi: multiple issues
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-4 ========================================= Severity: Critical Date : 2021-02-06 CVE-ID : CVE-2020-16044 CVE-2021-21117 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21124 CVE-2021-21125 CVE-2021-21126 CVE-2021-21127 CVE-2021-21128 CVE-2021-21129 CVE-2021-21130 CVE-2021-21131 CVE-2021-21132 CVE-2021-21133 CVE-2021-21134 CVE-2021-21135 CVE-2021-21136 CVE-2021-21137 CVE-2021-21138 CVE-2021-21139 CVE-2021-21140 CVE-2021-21141 CVE-2021-21142 CVE-2021-21143 CVE-2021-21144 CVE-2021-21145 CVE-2021-21146 CVE-2021-21147 CVE-2021-21148 Package : vivaldi Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1478 Summary ======= The package vivaldi before version 3.6.2165.36-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation, content spoofing and incorrect calculation. Resolution ========== Upgrade to 3.6.2165.36-1. # pacman -Syu "vivaldi>=3.6.2165.36-1" The problems have been fixed upstream in version 3.6.2165.36. Workaround ========== None. Description =========== - CVE-2020-16044 (arbitrary code execution) A security issue was found in Firefox before 84.0.2, Thunderbird before 78.6.1 and Chromium before 88.0.4324.96. A malicious peer could have modified a COOKIE-ECHO chunk in an SCTP packet in a way that potentially resulted in a use-after-free. Mozilla presumes that with enough effort it could have been exploited to run arbitrary code. - CVE-2021-21117 (insufficient validation) An insufficient policy enforcement security issue was found in the Cryptohome component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21118 (insufficient validation) An insufficient data validation security issue was found in the V8 component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21119 (arbitrary code execution) A use after free security issue was found in the Media component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21120 (arbitrary code execution) A use after free security issue was found in the WebSQL component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21121 (arbitrary code execution) A use after free security issue was found in the Omnibox component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21122 (arbitrary code execution) A use after free security issue was found in the Blink component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21123 (insufficient validation) An insufficient data validation security issue was found in the File System component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21124 (arbitrary code execution) A potential use after free security issue was found in the Speech Recognizer component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21125 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21126 (insufficient validation) An insufficient policy enforcement security issue was found in the extensions component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21127 (insufficient validation) An insufficient policy enforcement security issue was found in the extensions component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21128 (arbitrary code execution) A heap buffer overflow security issue was found in the Blink component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21129 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21130 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21131 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21132 (incorrect calculation) An inappropriate implementation security issue was found in the DevTools component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21133 (insufficient validation) An insufficient policy enforcement security issue was found in the Downloads component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21134 (content spoofing) An incorrect security UI security issue was found in the Page Info component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21135 (incorrect calculation) An inappropriate implementation security issue was found in the Performance API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21136 (insufficient validation) An insufficient policy enforcement security issue was found in the WebView component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21137 (incorrect calculation) An inappropriate implementation security issue was found in the DevTools component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21138 (arbitrary code execution) A use after free security issue was found in the DevTools component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21139 (incorrect calculation) An inappropriate implementation security issue was found in the iframe sandbox component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21140 (arbitrary code execution) An uninitialized use security issue was found in the USB component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21141 (insufficient validation) An insufficient policy enforcement security issue was found in the File System API component of the Chromium browser before version 88.0.4324.96. - CVE-2021-21142 (arbitrary code execution) A use after free security issue was found in the Payments component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21143 (arbitrary code execution) A heap buffer overflow security issue was found in the Extensions component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21144 (arbitrary code execution) A heap buffer overflow security issue was found in the Tab Groups component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21145 (arbitrary code execution) A use after free security issue was found in the Fonts component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21146 (arbitrary code execution) A use after free security issue was found in the Navigation component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21147 (incorrect calculation) An inappropriate implementation security issue was found in the Skia component of the Chromium browser before version 88.0.4324.146. - CVE-2021-21148 (arbitrary code execution) A heap buffer overflow security issue was found in the V8 component of the Chromium browser before version 88.0.4324.150. Impact ====== A remote attacker might be able to bypass security measures, trick the user into performing unwanted actions or execute arbitrary code. References ========== https://www.mozilla.org/en-US/security/advisories/mfsa2021-01/#CVE-2020-160… https://bugzilla.mozilla.org/show_bug.cgi?id=1683964 https://hg.mozilla.org/mozilla-central/rev/08ba03dc8d4420e04e7c77fee3013e68… https://hg.mozilla.org/mozilla-central/rev/8c09f4813fc7e8f44605b6092262199b… https://hg.mozilla.org/mozilla-central/rev/5991645a87d2abf289686d09d943229c… https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-des… https://crbug.com/1137179 https://crbug.com/1161357 https://crbug.com/1160534 https://crbug.com/1160602 https://crbug.com/1161143 https://crbug.com/1162131 https://crbug.com/1137247 https://crbug.com/1131346 https://crbug.com/1152327 https://crbug.com/1108126 https://crbug.com/1115590 https://crbug.com/1138877 https://crbug.com/1140403 https://crbug.com/1140410 https://crbug.com/1140417 https://crbug.com/1128206 https://crbug.com/1157743 https://crbug.com/1157800 https://crbug.com/1157818 https://crbug.com/1038002 https://crbug.com/1093791 https://crbug.com/1122487 https://crbug.com/937131 https://crbug.com/1136327 https://crbug.com/1140435 https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-des… https://crbug.com/1169317 https://crbug.com/1163504 https://crbug.com/1163845 https://crbug.com/1154965 https://crbug.com/1161705 https://crbug.com/1162942 https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-des… https://crbug.com/1170176 https://security.archlinux.org/CVE-2020-16044 https://security.archlinux.org/CVE-2021-21117 https://security.archlinux.org/CVE-2021-21118 https://security.archlinux.org/CVE-2021-21119 https://security.archlinux.org/CVE-2021-21120 https://security.archlinux.org/CVE-2021-21121 https://security.archlinux.org/CVE-2021-21122 https://security.archlinux.org/CVE-2021-21123 https://security.archlinux.org/CVE-2021-21124 https://security.archlinux.org/CVE-2021-21125 https://security.archlinux.org/CVE-2021-21126 https://security.archlinux.org/CVE-2021-21127 https://security.archlinux.org/CVE-2021-21128 https://security.archlinux.org/CVE-2021-21129 https://security.archlinux.org/CVE-2021-21130 https://security.archlinux.org/CVE-2021-21131 https://security.archlinux.org/CVE-2021-21132 https://security.archlinux.org/CVE-2021-21133 https://security.archlinux.org/CVE-2021-21134 https://security.archlinux.org/CVE-2021-21135 https://security.archlinux.org/CVE-2021-21136 https://security.archlinux.org/CVE-2021-21137 https://security.archlinux.org/CVE-2021-21138 https://security.archlinux.org/CVE-2021-21139 https://security.archlinux.org/CVE-2021-21140 https://security.archlinux.org/CVE-2021-21141 https://security.archlinux.org/CVE-2021-21142 https://security.archlinux.org/CVE-2021-21143 https://security.archlinux.org/CVE-2021-21144 https://security.archlinux.org/CVE-2021-21145 https://security.archlinux.org/CVE-2021-21146 https://security.archlinux.org/CVE-2021-21147 https://security.archlinux.org/CVE-2021-21148

1 0

[ASA-202102-3] wireshark-cli: denial of service
by Remi Gacogne 12 Feb '21

12 Feb '21

Arch Linux Security Advisory ASA-202102-3 ========================================= Severity: Low Date : 2021-02-06 CVE-ID : CVE-2021-22173 CVE-2021-22174 Package : wireshark-cli Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1510 Summary ======= The package wireshark-cli before version 3.4.3-1 is vulnerable to denial of service. Resolution ========== Upgrade to 3.4.3-1. # pacman -Syu "wireshark-cli>=3.4.3-1" The problems have been fixed upstream in version 3.4.3. Workaround ========== None. Description =========== - CVE-2021-22173 (denial of service) A memory leak leading to denial of service has been found in Wireshark before 3.4.3, in the USB HID dissector. It can be triggered by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. - CVE-2021-22174 (denial of service) A denial of service has been found in Wireshark before 3.4.3, in the USB HID dissector. It can be triggered by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. Impact ====== An attacker might be able to cause a denial of service by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. References ========== https://www.wireshark.org/security/wnpa-sec-2021-01 https://www.wireshark.org/security/wnpa-sec-2021-02 https://gitlab.com/wireshark/wireshark/-/issues/17124 https://gitlab.com/wireshark/wireshark/-/merge_requests/1812 https://gitlab.com/wireshark/wireshark/-/issues/17165 https://gitlab.com/wireshark/wireshark/-/merge_requests/1849 https://security.archlinux.org/CVE-2021-22173 https://security.archlinux.org/CVE-2021-22174

1 0