First published: Mon Dec 24 2018(Updated: )
An insufficient data validation flaw was found in the IndexedDB component of the Chromium browser. Upstream bug(s): <a href="https://code.google.com/p/chromium/issues/detail?id=917668">https://code.google.com/p/chromium/issues/detail?id=917668</a> External References: <a href="https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html">https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html</a>
Credit: cve-coordination@google.com Yongke Wang Tencent's Xuanwu Lab chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/chromium | 90.0.4430.212-1~deb10u1 116.0.5845.180-1~deb11u1 118.0.5993.70-1~deb11u1 116.0.5845.180-1~deb12u1 118.0.5993.70-1~deb12u1 118.0.5993.70-1 | |
redhat/chromium-browser | <72.0.3626.81 | 72.0.3626.81 |
Google Chrome (Trace Event) | <72.0.3626.81 | 72.0.3626.81 |
Google Chrome (Trace Event) | <72.0.3626.81 | |
Debian | =9.0 | |
Red Hat Enterprise Linux Desktop | =6.0 | |
Red Hat Enterprise Linux Server | =6.0 | |
Red Hat Enterprise Linux Workstation | =6.0 | |
Fedora | =29 | |
Fedora | =30 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2019-5773 has a high severity due to an insufficient data validation flaw in the Chromium browser's IndexedDB component.
To fix CVE-2019-5773, update to the latest version of the Chromium browser or Google Chrome as specified in the security advisories.
CVE-2019-5773 affects versions of Chromium and Google Chrome prior to 72.0.3626.81.
CVE-2019-5773 impacts multiple products including Chromium browser, Google Chrome, and any distributions relying on these applications.
Yes, CVE-2019-5773 can be potentially exploited remotely due to its presence in web applications using the affected browsers.