CVE-2019-5827: SQL Injection
Chrome could allow a remote malicious user to execute arbitrary code on the system, caused by an out-of-bounds access in SQLite. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service.
External References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160450
Other sources
Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 74.0.3729.131 - Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 74.0.3729.131 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 120.0.6099.224-1~deb11u1Fixed in 150.0.7871.100-1~deb12u1Fixed in 150.0.7871.124-1~deb12u1Fixed in 150.0.7871.100-1~deb13u1Fixed in 150.0.7871.124-1~deb13u1Fixed in 150.0.7871.124-1 - Upgrade
Upgrade
debian/sqlite3to a version that resolves this vulnerability.Fixed in 3.34.1-3Fixed in 3.34.1-3+deb11u1Fixed in 3.40.1-2+deb12u2Fixed in 3.46.1-7+deb13u1Fixed in 3.53.3-1 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 74.0.3729.131
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2019-5827.
What is the affected software?
The affected software is Google Chrome prior to version 74.0.3729.131.
Is this vulnerability a remote code execution vulnerability?
No, this vulnerability does not allow remote code execution.
How can I fix this vulnerability?
To fix this vulnerability, update Google Chrome to version 74.0.3729.131 or later.
What is the severity of CVE-2019-5827?
The severity of CVE-2019-5827 is high, with a CVSS score of 8.8.