Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1101056 - (CVE-2014-3152) CVE-2014-3152 v8: integer underflow fixed in Google Chrome 35.0.1916.114
CVE-2014-3152 v8: integer underflow fixed in Google Chrome 35.0.1916.114
Status: CLOSED NOTABUG
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
impact=moderate,public=20140331,repor...
: Security
Depends On: 1101057 1101058
Blocks: 1091840
  Show dependency tree / graph
 
Reported: 2014-05-25 22:52 EDT by Murray McAllister
Modified: 2016-04-26 16:34 EDT (History)
51 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2014-06-16 15:13:50 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Murray McAllister 2014-05-25 22:52:56 EDT 
Common Vulnerabilities and Exposures assigned an identifier CVE-2014-3152 to
the following vulnerability:

Name: CVE-2014-3152
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3152
Assigned: 20140503
Reference: http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html
Reference: https://code.google.com/p/chromium/issues/detail?id=358057
Reference: https://code.google.com/p/v8/source/detail?r=20363

Integer underflow in the LCodeGen::PrepareKeyedOperand function in
arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in
Google Chrome before 35.0.1916.114, allows remote attackers to cause a
denial of service or possibly have unspecified other impact via
vectors that trigger a negative key value.

It is not clear if the version in Fedora is affected or not.
Comment 1 Murray McAllister 2014-05-25 22:54:55 EDT 
Created v8 tracking bugs for this issue:

Affects: fedora-all [bug 1101057]
Affects: epel-6 [bug 1101058]
Comment 2 Tomas Hoger 2014-06-16 15:13:50 EDT 
This issue is in the ARM-specific code, hence this does not affect any Red Hat product.
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.