NVD

Id
25192  
Name
CVE-2015-3335  
Description
The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome before 42.0.2311.90 does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes, which might make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-04-19  
Modified Date
2017-01-03  
Seq
2015-3335  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133285 25192 CVE-2015-3335 http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
133286 25192 CVE-2015-3335 openSUSE-SU-2015:0748  View
133287 25192 CVE-2015-3335 72715  View
133288 25192 CVE-2015-3335 https://code.google.com/p/chromium/issues/detail?id=455839  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7086 JVNDB-2015-002406 Google Chrome の components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc における Rowhammer 攻撃を実行される脆弱性 Google Chrome の components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc の NaClSandbox::InitializeLayerTwoSandbox 関数は、ネイティブクライアント（別名 NaCl ）プロセスのための RLIMIT_AS および RLIMIT_DATA 制限を持たないため、Rowhammer 攻撃を実行されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-3335 80560 CVE-2015-3335 25192 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002406.html 2015-04-14 2015-04-21 View