Vulnerability Details : CVE-2019-13750
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page.
Vulnerability category: Input validation
Products affected by CVE-2019-13750
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:x86:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:x86:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:x86:*
- cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:x86:*
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-13750
0.38%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 73 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-13750
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST |
CWE ids for CVE-2019-13750
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-13750
-
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html
[security-announce] openSUSE-SU-2019:2692-1: important: Security updateBroken Link
-
https://security.gentoo.org/glsa/202003-08
Chromium, Google Chrome: Multiple vulnerabilities (GLSA 202003-08) — Gentoo securityThird Party Advisory
-
https://usn.ubuntu.com/4298-2/
USN-4298-2: SQLite vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
-
https://seclists.org/bugtraq/2020/Jan/27
Bugtraq: [SECURITY] [DSA 4606-1] chromium security updateMailing List;Third Party Advisory
-
https://crbug.com/1025464
Inloggen - Google AccountsPermissions Required
-
https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html
Chrome Releases: Stable Channel Update for DesktopVendor Advisory
-
https://www.debian.org/security/2020/dsa-4606
Debian -- Security Information -- DSA-4606-1 chromiumThird Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/
[SECURITY] Fedora 30 Update: chromium-79.0.3945.117-1.fc30 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
-
https://usn.ubuntu.com/4298-1/
USN-4298-1: SQLite vulnerabilities | Ubuntu security noticesThird Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html
[security-announce] openSUSE-SU-2019:2694-1: important: Security updateBroken Link
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/
[SECURITY] Fedora 31 Update: chromium-79.0.3945.79-1.fc31 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
-
https://access.redhat.com/errata/RHSA-2019:4238
RHSA-2019:4238 - Security Advisory - Red Hat Customer PortalThird Party Advisory
Jump to