Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2018-20346

CVE-2018-20346, high severity (CVSS 8.1): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
8.1

NVD scale

Exploitation
10.3 %

EPSS, predicted over 30 days

Tracked apps
2
Still exposed
0

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.

Attack vector : Network No privileges required No user interaction
Show raw CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS 10.31% moderate exploit risk percentile 95.5%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Chrome macOS com.google.Chrome
    Affected <71.0.3578.80 Fixed in 71.0.3578.80 Latest tracked 153.0.8010.53 patched
  • Google Chrome Windows winget:Google.Chrome
    Affected <71.0.3578.80 Fixed in 71.0.3578.80 Latest tracked 154.0.8037.58 patched

NVD references 5 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

OS versions that fix this CVE

This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.

Vulnerable CPE configurations (2)
Vendor Product Versions
google chrome
All platforms (wildcard)
 <71.0.3578.80
google chrome
All platforms (wildcard)
 <71.0.3578.80
View on NVD ↗ Advisory · www.sqlite.org Advisory · sqlite.org

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM