CVE-2014-3171
Published: 26 August 2014
Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
chromium-browser Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
| precise |
Released
(37.0.2062.94-0ubuntu0.12.04.1~pkg909)
|
|
| trusty |
Released
(37.0.2062.94-0ubuntu0.14.04.1~pkg1042)
|
|
| upstream |
Released
(37.0.2062.94)
|
|
|
oxide-qt Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
| precise |
Does not exist
|
|
| trusty |
Released
(1.1.2-0ubuntu0.14.04.1)
|
|
| upstream |
Needs triage
|