CVE-2018-6151 : Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.

Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension.

Published 2019-01-09 19:29:10

Updated 2021-09-08 17:21:50

Source Google Inc.

View at NVD, CVE.org

Products affected by CVE-2018-6151

Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Desktop » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Workstation » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Matching versions
Google » Chrome
Versions before (<) 66.0.3359.117
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Google » Chrome Os » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-6151

EPSS FAQ

0.80%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 82 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-6151

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-6151

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-6151

https://crbug.com/805905

805905 - Security: Bad cast to ChromeDownloadManagerDelegate* from DevToolsDownloadManagerDelegate* - chromium - Monorail
Issue Tracking;Exploit;Patch;Vendor Advisory
http://www.securityfocus.com/bid/104887

Google Chrome Prior to 68.0.3440.75 Multiple Security Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url
https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html

Chrome Releases: Stable Channel Update for Desktop
Release Notes;Vendor Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2018:2282

RHSA-2018:2282 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201808-01

Chromium, Google Chrome: Multiple vulnerabilities (GLSA 201808-01) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://www.debian.org/security/2018/dsa-4256

Debian -- Security Information -- DSA-4256-1 chromium-browser
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-6151

Products affected by CVE-2018-6151

Exploit prediction scoring system (EPSS) score for CVE-2018-6151

CVSS scores for CVE-2018-6151

CWE ids for CVE-2018-6151

References for CVE-2018-6151