Back to Database
Status published
High
CVE-2014-3152
Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google...
Vulnerability Description
Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-3152
Credits & Attribution
No credits recorded in the NVD database.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157363.html
- https://code.google.com/p/v8/source/detail?r=20363
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157338.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157357.html
- http://www.debian.org/security/2014/dsa-2939
- http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html
- http://secunia.com/advisories/60372
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html
- https://code.google.com/p/chromium/issues/detail?id=358057
- http://secunia.com/advisories/59155
- http://secunia.com/advisories/58920
- http://www.securitytracker.com/id/1030270
More from fedoraproject
View All →CVE-2020-27418
A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9...
Medium
4.4
CVE-2020-24612
An issue was discovered in the selinux-policy (aka Reference Policy)...
Medium
6.7
CVE-2019-7639
An issue was discovered in gsi-openssh-server 7.9p1 on Fedora 29....
High
8.1
CVE-2018-5345
A stack-based buffer overflow within GNOME gcab through 0.7.4 can...
High
7.8
CVE-2017-5885
Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set...
Critical
9.8
Affected Vendor
fedoraproject
View all reports →Affected Software
fedora, v8, chrome
Vulnerable Versions:
20, 21, 22, 0, 3.25.0, 3.25.1, 3.25.2, 3.25.3, 3.25.4, 3.25.5, 3.25.6, 3.25.7, 3.25.8, 3.25.9, 3.25.10, 3.25.11, 3.25.12, 3.25.13, 3.25.14, 3.25.15, 3.25.16, 3.25.17, 3.25.18, 3.25.19, 3.25.20, 3.25.21, 3.25.22, 3.25.23, 3.25.24, 3.25.25, 3.25.26, 3.25.27, 35.0.1916.0, 35.0.1916.1, 35.0.1916.2, 35.0.1916.3, 35.0.1916.4, 35.0.1916.5, 35.0.1916.6, 35.0.1916.7, 35.0.1916.8, 35.0.1916.9, 35.0.1916.10, 35.0.1916.11, 35.0.1916.13, 35.0.1916.14, 35.0.1916.15, 35.0.1916.17, 35.0.1916.18, 35.0.1916.19, 35.0.1916.20, 35.0.1916.21, 35.0.1916.22, 35.0.1916.23, 35.0.1916.27, 35.0.1916.31, 35.0.1916.32, 35.0.1916.33, 35.0.1916.34, 35.0.1916.35, 35.0.1916.36, 35.0.1916.37, 35.0.1916.38, 35.0.1916.39, 35.0.1916.40, 35.0.1916.41, 35.0.1916.42, 35.0.1916.43, 35.0.1916.44, 35.0.1916.45, 35.0.1916.46, 35.0.1916.47, 35.0.1916.48, 35.0.1916.49, 35.0.1916.51, 35.0.1916.52, 35.0.1916.54, 35.0.1916.56, 35.0.1916.57, 35.0.1916.59, 35.0.1916.61, 35.0.1916.68, 35.0.1916.69, 35.0.1916.71, 35.0.1916.72, 35.0.1916.74, 35.0.1916.77, 35.0.1916.80, 35.0.1916.82, 35.0.1916.84, 35.0.1916.85, 35.0.1916.86, 35.0.1916.88, 35.0.1916.90, 35.0.1916.92, 35.0.1916.93, 35.0.1916.95, 35.0.1916.96, 35.0.1916.98, 35.0.1916.99, 35.0.1916.101, 35.0.1916.103, 35.0.1916.104, 35.0.1916.105, 35.0.1916.106, 35.0.1916.107, 35.0.1916.108, 35.0.1916.109, 35.0.1916.110, 35.0.1916.111, 35.0.1916.112
Timeline
Official Publish:
May 21st, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.