SQLite bug impacts thousands of apps, including all Chromium-based browsers

guest · Dec 14, 2018

SQLite bug impacts thousands of apps, including all Chromium-based browsers
New 'Magellan' vulnerability will haunt the app ecosystem for years to come.
December 14, 2018
https://www.zdnet.com/article/sqlit...f-apps-including-all-chromium-based-browsers/

Discovered by Tencent's Blade security team, the vulnerability allows an attacker to run malicious code on the victim's computer, and in less dangerous situations, leak program memory or cause program crashes.

The bad news, according to Tencent Blade researchers, is that this vulnerability can also be exploited remotely by accessing something as simple as a web page, if the underlying browser support SQLite and the Web SQL API that translates the exploit code into regular SQL syntax.

Firefox and Edge don't support this API, but the Chromium open-source browser engine does. This means that Chromium-based browsers like Google Chrome, Vivaldi, Opera, and Brave, are all affected.
While it does not support Web SQL, Firefox, too, is affected, since it comes with a locally accessible SQLite database [...]
Click to expand...

A fix was shipped out on December 1, with the release of SQLite 3.26.0. The fix was also ported inside Chromium, and later in Google Chrome 71, released last week.

Chromium-based browsers like Vivaldi, Opera, and Brave are still one Chromium release behind, meaning they're most likely still affected.
Click to expand...

Tencent Blade security advisory

guest · Dec 24, 2019

Google Chrome impacted by new Magellan 2.0 vulnerabilities
Magellan 2.0 vulnerabilities were patched in Google Chrome 79.0.3945.79
December 24, 2019
https://www.zdnet.com/article/google-chrome-impacted-by-new-magellan-2-0-vulnerabilities/

A new set of SQLite vulnerabilities can allow attackers to remotely run malicious code inside Google Chrome, the world's most popular web browser.
The vulnerabilities, five, in total, are named "Magellan 2.0," and were disclosed today by the Tencent Blade security team.
WHAT ARE THE MAGELLAN VULNERABILITIES?
The Magellan 2.0 disclosure comes exactly one year and one week after the same Tencent Blade security team disclosed the original Magellan SQLite vulnerabilities, last year, in December 2018.
In a security advisory published today, the Tencent Blade team says the Magellan 2.0 flaws can lead to "remote code execution, leaking program memory or causing program crashes."
HOW AND WHAT'S VULNERABLE
A malicious website could use the Magellan 2.0 vulnerabilities to run malicious code against its Chrome visitors. However, the Tencent team says users have no reason to worry, as they've notified Google and the SQLite team of these issues already.
Click to expand...

The five Magellan 2.0 vulnerabilities are tracked as CVE-2019-13734, CVE-2019-13750, CVE-2019-13751, CVE-2019-13752, and CVE-2019-13753. The original Magellan vulnerabilities are tracked as CVE-2018-20346, CVE-2018-20505, and CVE-2018-20506.
Click to expand...

Tencent: Magellan 2.0

guest · Jan 27, 2020

RHEL 8 Still Vulnerable to “Magellan 2” SQLite Bugs, as Patches Drop
January 27, 2020
https://www.cbronline.com/enterprise-it/software/sqlite-vulnerability-red-hat/

Red Hat pushes out fresh patches…
Severe bugs in the ubiquitous SQLite engine – used in thousands of software applications – continue to pose a major security threat, security researchers say, with Red Hat admitting today that its flagship Red Hat Enterprise Linux (RHEL) 8 remains vulnerable, despite patching other products this week.

Who else is affected? Tencent Blade notes that “if you are using software that is using SQLite as component without the latest patch, which is 13 Dec 2019, and it supports external SQL queries [you are affected]. [Users of] Chrome that is prior to 79.0.3945.79 with WebSQL enabled” [are also vulnerable].
The company added: “Other devices such as PC/Mobile devices/IoT devices may also be affected, [this] depends on if there’s a proper attack surface.”
Click to expand...

Log in or Sign up

SQLite bug impacts thousands of apps, including all Chromium-based browsers

guest Guest

guest Guest

guest Guest

Log in or Sign up

SQLite bug impacts thousands of apps, including all Chromium-based browsers

guest Guest

guest Guest

guest Guest

Useful Searches