CVE-2014-3152
Fixed in a distro release EPSS 2%
Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.
Products: fedoraproject fedora, google v8, google chrome
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | chromium-browser | 35.0.1916.114-1~deb7u2 |
| Ubuntu 14.04 LTS | chromium-browser | 36.0.1985.125-0ubuntu1.14.04.0~pkg1029 |
| Ubuntu 14.04 LTS | oxide-qt | 1.0.4-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | libv8-3.14 | no fix |
| Ubuntu 18.04 LTS | libv8-3.14 | no fix |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |