CVE-2019-13734

Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Updated sqlite3 packages fix security vulnerabilities:

An out of bounds write flaw (CVE-2019-13734), insufficient data validation flaw (CVE-2019-13750), uninitialized use flaw (CVE-2019-13751), and out of bounds read flaws (CVE-2019-13752, CVE-2019-13753) in SQLite before 3.31.0.

It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this issue to cause a denial of service (CVE-2019-16168).

It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this issue to mishandles some expressions (CVE-2019-19242).

It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code (CVE-2019-19244).

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled (CVE-2019-19880).

For other changes in this update, see the referenced releaaselogs.

Multiple flaws were found in the way Chromium 78.0.3904.108 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-13725, CVE-2019-13726, CVE-2019-13727, CVE-2019-13728, CVE-2019-13729, CVE-2019-13730, CVE-2019-13732, CVE-2019-13734, CVE-2019-13735, CVE-2019-13736, CVE-2019-13737, CVE-2019-13738, CVE-2019-13739, CVE-2019-13740, CVE-2019-13741, CVE-2019-13742, CVE-2019-13743, CVE-2019-13744, CVE-2019-13745, CVE-2019-13746, CVE-2019-13747, CVE-2019-13748, CVE-2019-13749, CVE-2019-13750, CVE-2019-13751, CVE-2019-13752, CVE-2019-13753, CVE-2019-13754, CVE-2019-13755, CVE-2019-13756, CVE-2019-13757, CVE-2019-13758, CVE-2019-13759, CVE-2019-13761, CVE-2019-13762, CVE-2019-13763, CVE-2019-13764, CVE-2019-13767, CVE-2020-6377, CVE-2020-6378, CVE-2020-6379, CVE-2020-6380)

This update for chromium fixes the following issues:

Chromium was updated to 79.0.3945.79 (boo#1158982)

• CVE-2019-13725: Fixed a use after free in Bluetooth
• CVE-2019-13726: Fixed a heap buffer overflow in password manager
• CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets
• CVE-2019-13728: Fixed an out of bounds write in V8
• CVE-2019-13729: Fixed a use after free in WebSockets
• CVE-2019-13730: Fixed a type Confusion in V8
• CVE-2019-13732: Fixed a use after free in WebAudio
• CVE-2019-13734: Fixed an out of bounds write in SQLite
• CVE-2019-13735: Fixed an out of bounds write in V8
• CVE-2019-13764: Fixed a type Confusion in V8
• CVE-2019-13736: Fixed an integer overflow in PDFium
• CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete
• CVE-2019-13738: Fixed an insufficient policy enforcement in navigation
• CVE-2019-13739: Fixed an incorrect security UI in Omnibox
• CVE-2019-13740: Fixed an incorrect security UI in sharing
• CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink
• CVE-2019-13742: Fixed an incorrect security UI in Omnibox
• CVE-2019-13743: Fixed an incorrect security UI in external protocol handling
• CVE-2019-13744: Fixed an insufficient policy enforcement in cookies
• CVE-2019-13745: Fixed an insufficient policy enforcement in audio
• CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox
• CVE-2019-13747: Fixed an uninitialized Use in rendering
• CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools
• CVE-2019-13749: Fixed an incorrect security UI in Omnibox
• CVE-2019-13750: Fixed an insufficient data validation in SQLite
• CVE-2019-13751: Fixed an uninitialized Use in SQLite
• CVE-2019-13752: Fixed an out of bounds read in SQLite
• CVE-2019-13753: Fixed an out of bounds read in SQLite
• CVE-2019-13754: Fixed an insufficient policy enforcement in extensions
• CVE-2019-13755: Fixed an insufficient policy enforcement in extensions
• CVE-2019-13756: Fixed an incorrect security UI in printing
• CVE-2019-13757: Fixed an incorrect security UI in Omnibox
• CVE-2019-13758: Fixed an insufficient policy enforcement in navigation
• CVE-2019-13759: Fixed an incorrect security UI in interstitials
• CVE-2019-13761: Fixed an incorrect security UI in Omnibox
• CVE-2019-13762: Fixed an insufficient policy enforcement in downloads
• CVE-2019-13763: Fixed an insufficient policy enforcement in payments

This update for chromium fixes the following issues:

Chromium was updated to 79.0.3945.79 (boo#1158982)

• CVE-2019-13725: Fixed a use after free in Bluetooth
• CVE-2019-13726: Fixed a heap buffer overflow in password manager
• CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets
• CVE-2019-13728: Fixed an out of bounds write in V8
• CVE-2019-13729: Fixed a use after free in WebSockets
• CVE-2019-13730: Fixed a type Confusion in V8
• CVE-2019-13732: Fixed a use after free in WebAudio
• CVE-2019-13734: Fixed an out of bounds write in SQLite
• CVE-2019-13735: Fixed an out of bounds write in V8
• CVE-2019-13764: Fixed a type Confusion in V8
• CVE-2019-13736: Fixed an integer overflow in PDFium
• CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete
• CVE-2019-13738: Fixed an insufficient policy enforcement in navigation
• CVE-2019-13739: Fixed an incorrect security UI in Omnibox
• CVE-2019-13740: Fixed an incorrect security UI in sharing
• CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink
• CVE-2019-13742: Fixed an incorrect security UI in Omnibox
• CVE-2019-13743: Fixed an incorrect security UI in external protocol handling
• CVE-2019-13744: Fixed an insufficient policy enforcement in cookies
• CVE-2019-13745: Fixed an insufficient policy enforcement in audio
• CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox
• CVE-2019-13747: Fixed an uninitialized Use in rendering
• CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools
• CVE-2019-13749: Fixed an incorrect security UI in Omnibox
• CVE-2019-13750: Fixed an insufficient data validation in SQLite
• CVE-2019-13751: Fixed an uninitialized Use in SQLite
• CVE-2019-13752: Fixed an out of bounds read in SQLite
• CVE-2019-13753: Fixed an out of bounds read in SQLite
• CVE-2019-13754: Fixed an insufficient policy enforcement in extensions
• CVE-2019-13755: Fixed an insufficient policy enforcement in extensions
• CVE-2019-13756: Fixed an incorrect security UI in printing
• CVE-2019-13757: Fixed an incorrect security UI in Omnibox
• CVE-2019-13758: Fixed an insufficient policy enforcement in navigation
• CVE-2019-13759: Fixed an incorrect security UI in interstitials
• CVE-2019-13761: Fixed an incorrect security UI in Omnibox
• CVE-2019-13762: Fixed an insufficient policy enforcement in downloads
• CVE-2019-13763: Fixed an insufficient policy enforcement in payments

This update was imported from the openSUSE:Leap:15.1:Update update project.

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

It was discovered that SQLite incorrectly handled certain shadow tables. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-13734, CVE-2019-13750, CVE-2019-13753)

It was discovered that SQLite incorrectly handled certain corrupt records. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-13751)

It was discovered that SQLite incorrectly handled certain queries. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.10. (CVE-2019-19880)

It was discovered that SQLite incorrectly handled certain queries. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 19.10. (CVE-2019-19923)

It was discovered that SQLite incorrectly handled parser tree rewriting. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.10. (CVE-2019-19924)

It was discovered that SQLite incorrectly handled certain ZIP archives. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 19.10. (CVE-2019-19925, CVE-2019-19959)

It was discovered that SQLite incorrectly handled errors during parsing. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-19926)

It was discovered that SQLite incorrectly handled parsing errors. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-20218)

It was discovered that SQLite incorrectly handled generated column optimizations. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 19.10. (CVE-2020-9327)

USN-4298-1 fixed several vulnerabilities in SQLite. This update provides the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that SQLite incorrectly handled certain shadow tables. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-13734, CVE-2019-13750, CVE-2019-13752, CVE-2019-13753)

It was discovered that SQLite incorrectly handled certain corrupt records. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-13751)

It was discovered that SQLite incorrectly handled errors during parsing. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-19926)