CVE-2015-3335

Publication date 19 April 2015

Last updated 24 July 2024

Ubuntu priority

Description

The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome before 42.0.2311.90 does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes, which might make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
chromium-browser	15.04 vivid	Not affected
	14.10 utopic	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected
	10.04 LTS lucid	Ignored end of life
oxide-qt	15.04 vivid	Not affected
	14.10 utopic	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://code.google.com/p/chromium/issues/detail?id=455839
http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
https://www.cve.org/CVERecord?id=CVE-2015-3335

CVE-2015-3335

Description

Status

References

Other references

Access our resources on patching vulnerabilities