Upstream information

CVE-2024-0333 at MITRE

Description

Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. (Chromium security severity: High)

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

SUSE Bugzilla entry: 1218719 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Package Hub 15 SP5
  • chromedriver >= 120.0.6099.216-bp155.2.64.1
  • chromium >= 120.0.6099.216-bp155.2.64.1
 Patchnames:
openSUSE-2024-20
openSUSE Leap 15.5
  • chromedriver >= 120.0.6099.216-bp155.2.64.1
  • chromium >= 120.0.6099.216-bp155.2.64.1
 Patchnames:
openSUSE-2024-20
openSUSE Tumbleweed
  • chromedriver >= 120.0.6099.216-1.1
  • chromium >= 120.0.6099.216-1.1
  • ungoogled-chromium >= 120.0.6099.216-1.1
  • ungoogled-chromium-chromedriver >= 120.0.6099.216-1.1
 Patchnames:
openSUSE Tumbleweed GA chromedriver-120.0.6099.216-1.1
openSUSE Tumbleweed GA ungoogled-chromium-120.0.6099.216-1.1

SUSE Timeline for this CVE

CVE page created: Thu Jan 11 10:45:10 2024
CVE page last modified: Wed Jan 17 00:38:28 2024