Home > Vulnerability Database > CVE-2014-3155

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2014-3155

Date: June 11, 2014

net/spdy/spdy_write_queue.cc in the SPDY implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging incorrect queue maintenance.

Language: C++

Severity Score

5.3

Related Resources (15)

Url: http://secunia.com/advisories/58585

Url: http://www.debian.org/security/2014/dsa-2959

Url: https://src.chromium.org/viewvc/chrome?revision=269246&view=revision

Url: https://code.google.com/p/chromium/issues/detail?id=369539

Url: https://nvd.nist.gov/vuln/detail/CVE-2014-3155

Url: http://secunia.com/advisories/59090

Url: https://src.chromium.org/viewvc/chrome?revision=267984&view=revision

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2014-3155

Url: http://secunia.com/advisories/60061

Url: https://src.chromium.org/viewvc/chrome?revision=268730&view=revision

Url: http://googlechromereleases.blogspot.com/2014/06/stable-channel-update.html

Url: http://security.gentoo.org/glsa/glsa-201408-16.xml

Url: http://secunia.com/advisories/60372

Url: http://www.securityfocus.com/bid/67980

Url: https://www.mend.io/vulnerability-database/CVE-2014-3155

Severity Score

5.3

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us