CVE-2013-6638
CVE-2013-6638
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) Runtime_TypedArrayInitialize and (2) Runtime_TypedArrayInitializeFromArrayLike functions.
EPSS 1.9%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libv8-3.14 Ubuntu:16.04:LTS
- Versions
- 3.14.5.8-5ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libv8-3.14 Ubuntu:18.04:LTS
- Versions
- 3.14.5.8-11ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://secunia.com/advisories/56217
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00124.html
- http://code.google.com/p/v8/source/detail?r=17800
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00063.html
- http://www.mail-archive.com/v8-dev%40googlegroups.com/msg79646.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00122.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
- http://googlechromereleases.blogspot.com/2013/12/stable-channel-update.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00096.html
- http://www.debian.org/security/2013/dsa-2811
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00090.html
- http://secunia.com/advisories/56216
- http://www.securitytracker.com/id/1029442
- https://code.google.com/p/chromium/issues/detail?id=319722
- https://nvd.nist.gov/vuln/detail/CVE-2013-6638