CVE-2018-6082
Fixed in a distro release EPSS 1%
Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page.
Products: google chrome, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 9 | chromium-browser | 66.0.3359.117-1~deb9u1 |
| Red Hat rhel extras 6 | chromium-browser | 0:65.0.3325.146-2.el6_9 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:65.0.3325.146-2.el6_9 |
| SUSE Package Hub 12 SP2 | chromium | 66.0.3359.181-55.1 |
| Ubuntu 14.04 LTS | chromium-browser | 65.0.3325.181-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | chromium-browser | 65.0.3325.181-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | oxide-qt | no fix |
| openSUSE Tumbleweed | chromium | 93.0.4577.82-1.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |