high
8.8
CWE
89 787
Advisory Published
Updated

CVE-2019-13734: SQL Injection

First published: Tue Dec 10 2019(Updated: )

An out of bounds write flaw was found in the SQLite component of the Chromium browser. Upstream bug(s): <a href="https://code.google.com/p/chromium/issues/detail?id=1025466">https://code.google.com/p/chromium/issues/detail?id=1025466</a> External References: <a href="https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html">https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html</a>

Credit: chrome-cve-admin@google.com

Affected SoftwareAffected VersionHow to fix
redhat/chromium-browser<79.0.3945.79
79.0.3945.79
redhat/sqlite<3.31.0
3.31.0
IBM Data Risk Manager<=2.0.6
debian/chromium
120.0.6099.224-1~deb11u1
128.0.6613.84-1~deb12u1
129.0.6668.100-1~deb12u1
129.0.6668.89-1
129.0.6668.100-2
Google Chrome<79.0.3945.79
Fedoraproject Fedora=30
Fedoraproject Fedora=31
redhat openshift container platform=3.11
redhat openshift container platform=4.2
Red Hat Enterprise Linux=8.0
redhat enterprise Linux desktop=6.0
redhat enterprise Linux desktop=7.0
redhat enterprise Linux eus=7.7
redhat enterprise Linux eus=8.1
redhat enterprise Linux eus=8.2
redhat enterprise Linux eus=8.4
redhat enterprise Linux server=6.0
redhat enterprise Linux server=7.0
redhat enterprise Linux server aus=7.7
redhat enterprise Linux server aus=8.2
redhat enterprise Linux server aus=8.4
redhat enterprise Linux server tus=7.7
redhat enterprise Linux server tus=8.2
redhat enterprise Linux server tus=8.4
redhat enterprise Linux workstation=6.0
redhat enterprise Linux workstation=7.0
Ubuntu Linux=14.04
Ubuntu Linux=16.04
Ubuntu Linux=18.04
Ubuntu Linux=19.10
All of
suse package hub
SUSE Linux Enterprise Server=12.0
openSUSE Backports=15.0-sp1
Debian GNU/Linux=9.0
Debian GNU/Linux=10.0
Oracle Communications Cloud Native Core Network Repository Function=1.14.0
Fedora=30
Fedora=31
Ubuntu=14.04
Ubuntu=16.04
Ubuntu=18.04
Ubuntu=19.10
suse package hub
SUSE Linux Enterprise Server=12.0
Debian=9.0
Debian=10.0

Remedy

https://www.oracle.com/security-alerts/cpujan2022.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is the severity of CVE-2019-13734?

    CVE-2019-13734 is classified as a high severity vulnerability due to its potential to allow an attacker to execute arbitrary code.

  • What software is affected by CVE-2019-13734?

    CVE-2019-13734 affects several versions of the Chromium browser and the SQLite component, among other software products.

  • How do I fix CVE-2019-13734?

    To fix CVE-2019-13734, update to the latest version of the affected software, such as Chromium 79.0.3945.79 or the latest available SQLite versions.

  • What happens if I don't patch CVE-2019-13734?

    If you do not patch CVE-2019-13734, your system may be vulnerable to exploitation which can lead to data breaches or unauthorized access.

  • How can I determine if my system is vulnerable to CVE-2019-13734?

    You can determine if your system is vulnerable to CVE-2019-13734 by checking the version of the installed Chromium browser or SQLite and comparing it against the vulnerability definitions.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203