CVE-2022-2618: Insufficient validation of untrusted input in Internals

Q: What is the severity of CVE-2022-2618?

CVE-2022-2618 has a moderate severity rating, indicating it poses a significant risk if exploited.

Q: How do I fix CVE-2022-2618?

To fix CVE-2022-2618, users should update Google Chrome to version 104.0.5112.79 or later.

Q: What are the effects of CVE-2022-2618?

CVE-2022-2618 can allow remote attackers to bypass download restrictions through malicious files.

Q: Is CVE-2022-2618 specific to any operating system?

CVE-2022-2618 affects Google Chrome across multiple operating systems, including Fedora.

Q: Can I still be vulnerable to CVE-2022-2618 if I am using an updated version of Chrome?

No, if you are using Google Chrome version 104.0.5112.79 or later, you are not vulnerable to CVE-2022-2618.

Published Mar 21, 2022

Updated

Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file .

Credit

asnine

Affected Software

7 affected componentsFixes available

Google Chrome<104.0.5112.79

104.0.5112.79

Google Chrome<104.0.5112.79

Fedoraproject Fedora=37

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium

150.0.7871.100-1~deb12u1156.0.8078.79-1~deb12u1150.0.7871.181-1~deb13u1156.0.8078.79-1~deb13u1156.0.8078.79-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome (Trace Event) to a version that resolves this vulnerability.
Fixed in 104.0.5112.79
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 104.0.5112.79-1
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 104.0.5112.79

Event History

Mar 21, 2022

CVE Published

12:00 AM

Aug 12, 2022

CVE Published

via MITRE·07:37 PM

Data Sourced

via MITRE·07:37 PM

DescriptionWeakness

Data Sourced

via OSV·08:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2022-2618?

CVE-2022-2618 has a moderate severity rating, indicating it poses a significant risk if exploited.

How do I fix CVE-2022-2618?

To fix CVE-2022-2618, users should update Google Chrome to version 104.0.5112.79 or later.

What are the effects of CVE-2022-2618?

CVE-2022-2618 can allow remote attackers to bypass download restrictions through malicious files.

Is CVE-2022-2618 specific to any operating system?

CVE-2022-2618 affects Google Chrome across multiple operating systems, including Fedora.

Can I still be vulnerable to CVE-2022-2618 if I am using an updated version of Chrome?

No, if you are using Google Chrome version 104.0.5112.79 or later, you are not vulnerable to CVE-2022-2618.

CVE-2022-2618: Insufficient validation of untrusted input in Internals

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-2618?

How do I fix CVE-2022-2618?

What are the effects of CVE-2022-2618?

Is CVE-2022-2618 specific to any operating system?

Can I still be vulnerable to CVE-2022-2618 if I am using an updated version of Chrome?

Company

Resources

Contact