CVE-2018-6138: Input Validation

Q: What must an attacker do to exploit this issue?

The attacker must convince a user to install a malicious Chrome extension. Exploitation then uses a crafted extension to bypass navigation restrictions.

Q: Are users exposed simply by visiting a malicious website?

The provided information indicates user interaction is required: the user must install the malicious extension. It does not describe exploitation through website visitation alone.

Q: Which versions are affected?

Google Chrome versions prior to 67.0.3396.62 are affected. The listed software also includes Debian and Red Hat Chromium Browser packages, but no package-specific fixed versions are provided.

Published May 30, 2018

Updated

An overly permissive policy flaw was found in the Extensions component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=810220

External References:

https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html

Other sources

Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.

Affected Software

3 affected componentsFixes available

debian/chromium-browser

redhat/chromium-browser<67.0.3396.62

67.0.3396.62

Google Chrome<67.0.3396.62

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/chromium-browser to a version that resolves this vulnerability.
Fixed in 67.0.3396.62
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 67.0.3396.62

Event History

May 30, 2018

Data Sourced

via Red Hat·07:57 AM

DescriptionSeverityAffected Software

Jun 27, 2019

CVE Published

via MITRE·04:13 PM

Data Sourced

via MITRE·04:13 PM

DescriptionWeakness

Frequently Asked Questions

What must an attacker do to exploit this issue?

The attacker must convince a user to install a malicious Chrome extension. Exploitation then uses a crafted extension to bypass navigation restrictions.

Are users exposed simply by visiting a malicious website?

The provided information indicates user interaction is required: the user must install the malicious extension. It does not describe exploitation through website visitation alone.

Which versions are affected?

Google Chrome versions prior to 67.0.3396.62 are affected. The listed software also includes Debian and Red Hat Chromium Browser packages, but no package-specific fixed versions are provided.

CVE-2018-6138: Input Validation

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Are users exposed simply by visiting a malicious website?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Are users exposed simply by visiting a malicious website?

Which versions are affected?