Lucene search

[email protected]NVD:CVE-2014-3152

HistoryMay 21, 2014 - 11:14 a.m.

CVE-2014-3152

2014-05-2111:14:09

CWE-189

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

JSON

Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.

Affected configurations

NVD

Node

fedoraprojectfedoraMatch20

fedoraprojectfedoraMatch21

fedoraprojectfedoraMatch22

Node

googlev8Range≤3.25.28

googlev8Match3.25.0

googlev8Match3.25.1

googlev8Match3.25.2

googlev8Match3.25.3

googlev8Match3.25.4

googlev8Match3.25.5

googlev8Match3.25.6

googlev8Match3.25.7

googlev8Match3.25.8

googlev8Match3.25.9

googlev8Match3.25.10

googlev8Match3.25.11

googlev8Match3.25.12

googlev8Match3.25.13

googlev8Match3.25.14

googlev8Match3.25.15

googlev8Match3.25.16

googlev8Match3.25.17

googlev8Match3.25.18

googlev8Match3.25.19

googlev8Match3.25.20

googlev8Match3.25.21

googlev8Match3.25.22

googlev8Match3.25.23

googlev8Match3.25.24

googlev8Match3.25.25

googlev8Match3.25.26

googlev8Match3.25.27

Node

googlechromeRange≤35.0.1916.113

googlechromeMatch35.0.1916.0

googlechromeMatch35.0.1916.1

googlechromeMatch35.0.1916.2

googlechromeMatch35.0.1916.3

googlechromeMatch35.0.1916.4

googlechromeMatch35.0.1916.5

googlechromeMatch35.0.1916.6

googlechromeMatch35.0.1916.7

googlechromeMatch35.0.1916.8

googlechromeMatch35.0.1916.9

googlechromeMatch35.0.1916.10

googlechromeMatch35.0.1916.11

googlechromeMatch35.0.1916.13

googlechromeMatch35.0.1916.14

googlechromeMatch35.0.1916.15

googlechromeMatch35.0.1916.17

googlechromeMatch35.0.1916.18

googlechromeMatch35.0.1916.19

googlechromeMatch35.0.1916.20

googlechromeMatch35.0.1916.21

googlechromeMatch35.0.1916.22

googlechromeMatch35.0.1916.23

googlechromeMatch35.0.1916.27

googlechromeMatch35.0.1916.31

googlechromeMatch35.0.1916.32

googlechromeMatch35.0.1916.33

googlechromeMatch35.0.1916.34

googlechromeMatch35.0.1916.35

googlechromeMatch35.0.1916.36

googlechromeMatch35.0.1916.37

googlechromeMatch35.0.1916.38

googlechromeMatch35.0.1916.39

googlechromeMatch35.0.1916.40

googlechromeMatch35.0.1916.41

googlechromeMatch35.0.1916.42

googlechromeMatch35.0.1916.43

googlechromeMatch35.0.1916.44

googlechromeMatch35.0.1916.45

googlechromeMatch35.0.1916.46

googlechromeMatch35.0.1916.47

googlechromeMatch35.0.1916.48

googlechromeMatch35.0.1916.49

googlechromeMatch35.0.1916.51

googlechromeMatch35.0.1916.52

googlechromeMatch35.0.1916.54

googlechromeMatch35.0.1916.56

googlechromeMatch35.0.1916.57

googlechromeMatch35.0.1916.59

googlechromeMatch35.0.1916.61

googlechromeMatch35.0.1916.68

googlechromeMatch35.0.1916.69

googlechromeMatch35.0.1916.71

googlechromeMatch35.0.1916.72

googlechromeMatch35.0.1916.74

googlechromeMatch35.0.1916.77

googlechromeMatch35.0.1916.80

googlechromeMatch35.0.1916.82

googlechromeMatch35.0.1916.84

googlechromeMatch35.0.1916.85

googlechromeMatch35.0.1916.86

googlechromeMatch35.0.1916.88

googlechromeMatch35.0.1916.90

googlechromeMatch35.0.1916.92

googlechromeMatch35.0.1916.93

googlechromeMatch35.0.1916.95

googlechromeMatch35.0.1916.96

googlechromeMatch35.0.1916.98

googlechromeMatch35.0.1916.99

googlechromeMatch35.0.1916.101

googlechromeMatch35.0.1916.103

googlechromeMatch35.0.1916.104

googlechromeMatch35.0.1916.105

googlechromeMatch35.0.1916.106

googlechromeMatch35.0.1916.107

googlechromeMatch35.0.1916.108

googlechromeMatch35.0.1916.109

googlechromeMatch35.0.1916.110

googlechromeMatch35.0.1916.111

googlechromeMatch35.0.1916.112

References

googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html

lists.fedoraproject.org/pipermail/package-announce/2015-May/157338.html

lists.fedoraproject.org/pipermail/package-announce/2015-May/157357.html

lists.fedoraproject.org/pipermail/package-announce/2015-May/157363.html

lists.opensuse.org/opensuse-updates/2014-06/msg00023.html

secunia.com/advisories/58920

secunia.com/advisories/59155

secunia.com/advisories/60372

www.debian.org/security/2014/dsa-2939

www.securitytracker.com/id/1030270

code.google.com/p/chromium/issues/detail?id=358057

code.google.com/p/v8/source/detail?r=20363

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

JSON

Related for NVD:CVE-2014-3152

prion1 nessus11 cvelist1 ubuntucve1 openvas9 fedora3 debiancve1 cve1 kaspersky1 chrome1 debian2 freebsd1 securityvulns2 osv1 ubuntu1