CVE-2019-5800: Input Validation

Reference Links

• https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html (Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html
• https://crbug.com/894228
• https://code.google.com/p/chromium/issues/detail?id=894228
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1688209
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1688208
• https://access.redhat.com/errata/RHSA-2019:0708
• https://bugzilla.redhat.com/show_bug.cgi?id=1688202

Parent vulnerabilities

(Appears in the following advisories)

• 8736584565359439648

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-5787
• CVE-2019-5788
• CVE-2019-5789
• CVE-2019-5790
• CVE-2019-5791
• CVE-2019-5792
• CVE-2019-5793
• CVE-2019-5794
• CVE-2019-5795
• CVE-2019-5796
• CVE-2019-5797
• CVE-2019-5798
• CVE-2019-5799
• CVE-2019-5801
• CVE-2019-5802
• CVE-2019-5803
• CVE-2019-5804

Frequently Asked Questions

• What is the severity of CVE-2019-5800?

  CVE-2019-5800 has a high severity rating due to its ability to bypass content security policies.

• How do I fix CVE-2019-5800?

  To fix CVE-2019-5800, you need to update your Google Chrome or Chromium browser to version 73.0.3683.75 or later.

• What platforms are affected by CVE-2019-5800?

  CVE-2019-5800 affects Google Chrome versions prior to 73.0.3683.75 and Chromium browsers on various platforms like Red Hat and openSUSE.

• Can CVE-2019-5800 be exploited remotely?

  Yes, CVE-2019-5800 allows remote attackers to bypass content security policies by using a crafted HTML page.

• What is a content security policy in the context of CVE-2019-5800?

  A content security policy is a security feature that helps prevent a variety of attacks by restricting how resources can be loaded by a web page.