CVE

Id
80612  
CVE No.
CVE-2015-3335  
Status
Candidate  
Description
The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome before 42.0.2311.90 does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes, which might make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox.  
Phase
Assigned (20150419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
729021 80612 CVE-2015-3335 CONFIRM:http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
729022 80612 CVE-2015-3335 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=455839  View
729023 80612 CVE-2015-3335 SUSE:openSUSE-SU-2015:0748  View
729024 80612 CVE-2015-3335 URL:http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html  View
729025 80612 CVE-2015-3335 BID:72715  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7135 JVNDB-2015-002455 Drupal 用 Taxonomy Tools モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Taxonomy Tools モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-3387 80612 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002455.html  View