Google Chrome prior 71.0.3578.80 304 Status Code HTML Page input validation

Summaryinfo

A vulnerability marked as critical has been reported in Google Chrome. This vulnerability affects unknown code of the component 304 Status Code Handler. This manipulation as part of HTML Page causes input validation. This vulnerability appears as CVE-2018-20068. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in Google Chrome (Web Browser). It has been declared as critical. Affected by this vulnerability is an unknown code of the component 304 Status Code Handler. The manipulation as part of a HTML Page leads to a input validation vulnerability. The CWE definition for the vulnerability is CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Incorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.

The bug was discovered 12/04/2018. The weakness was presented 01/09/2019 (Website). It is possible to read the advisory at chromereleases.googleblog.com. This vulnerability is known as CVE-2018-20068 since 12/11/2018. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 04/27/2020). It is expected to see the exploit prices for this product increasing in the near future.

The vulnerability was handled as a non-public zero-day exploit for at least 36 days. During that time the estimated underground price was around $25k-$100k.

Upgrading to version 71.0.3578.80 eliminates this vulnerability.

See VDB-127833, VDB-127834, VDB-127835 and VDB-127836 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Web Browser

Vendor

• Google

Name

• Chrome

License

• free

Website

• Vendor: https://www.google.com/
• Product: https://www.google.com/chrome/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion