PT-2014-5118 · Google+2 · Google Chrome+2

Published 2014-08-12 · Updated 2024-06-15 · CVE-2014-3165

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 36.0.1985.143

Description A use-after-free issue exists in the Web Sockets implementation in Blink, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This issue is triggered by vectors that cause an unexpectedly long lifetime of a temporary object during method completion.

Recommendations For versions prior to 36.0.1985.143, update to version 36.0.1985.143 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2014-2028

CVE-2014-3165

DSA-3039-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

USN-2320-1

Affected Products

Alt Linux

Google Chrome

Ubuntu

References · 2361

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3165 · Security Note
• https://ubuntu.com/security/CVE-2014-3167 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3165 · Security Note
• https://osv.dev/vulnerability/USN-2320-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3166 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-3165 · Security Note
• https://ubuntu.com/security/notices/USN-2320-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-2028 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201408-16.xml · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-3165 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-3165 · Vendor Advisory
• http://debian.org/security/2014/dsa-3039 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-3166 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory