Home

CVE-2019-13734

Description

Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
5.904

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (79.0.3945.79)Windows
Multiple vulnerabilities fixed in Google Chrome (79.0.3945.79)Windows
Multiple vulnerabilities are fixed in Update for Google Chrome For Mac (79.0.3945.79)Mac
(RHSA-2019:4238) chromium-browser security update chromium-browser-79.0.3945.79-1.el6_10.i686.rpmLinux
(RHSA-2019:4238) chromium-browser security update chromium-browser-79.0.3945.79-1.el6_10.x86_64.rpmLinux
chromium security update(DSA-4606-1) chromium_79.0.3945.130-1~deb10u1_i386.debLinux
chromium security update(DSA-4606-1) chromium_79.0.3945.130-1~deb10u1_amd64.debLinux
(RHSA-2020:0227) sqlite security update sqlite-doc-3.7.17-8.el7_7.1.noarch.rpmLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_amd64.debLinux
Lemon update (ELSA-2020-0227) lemon-3.7.17-8.el7_7.1.x86_64.rpmLinux
Sqlite update (ELSA-2020-0227) sqlite-3.7.17-8.el7_7.1.x86_64.rpmLinux
Sqlite-devel update (ELSA-2020-0227) sqlite-devel-3.7.17-8.el7_7.1.x86_64.rpmLinux
Sqlite-tcl update (ELSA-2020-0227) sqlite-tcl-3.7.17-8.el7_7.1.x86_64.rpmLinux
Sqlite-doc update (ELSA-2020-0227) sqlite-doc-3.7.17-8.el7_7.1.noarch.rpmLinux
Sqlite update (ELSA-2020-0227) sqlite-3.7.17-8.el7_7.1.i686.rpmLinux
Sqlite-devel update (ELSA-2020-0227) sqlite-devel-3.7.17-8.el7_7.1.i686.rpmLinux
Multiple vulnerabilities fixed in Google Chrome (79.0.3945.79) (For Debian)Linux
Multiple vulnerabilities fixed in Google Chrome (79.0.3945.79) (For Centos)Linux
Multiple vulnerabilities fixed in Google Chrome (79.0.3945.79) (For RedHat)Linux
Multiple vulnerabilities fixed in Google Chrome (79.0.3945.79) (For Suse)Linux
Multiple vulnerabilities fixed in Google Chrome (79.0.3945.79) (For Ubuntu)Linux
(CESA-2020:0227) sqlite security update sqlite-doc-3.7.17-8.el7_7.1.noarch.rpmLinux
(RHSA-2020:0227)Important: security update sqlite-debuginfo-3.7.17-8.el7_7.1.i686.rpmLinux
(RHSA-2020:0227)Important: security update sqlite-debuginfo-3.7.17-8.el7_7.1.x86_64.rpmLinux
Out-of-bounds Write Vulnerability (CVE-2019-13734)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-312112Google Chrome (x64) (79.0.3945.79)
PATCH-312111Google Chrome (79.0.3945.79)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234