The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome before 42.0.2311.90 does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes, which might make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Apr 23, 2015 | Apr 19, 2015 |
| Suse | — | Upgrade chromium-desktop-gnomeUpgrade chromium-ffmpegsumoUpgrade chromedriverUpgrade chromium-desktop-kdeUpgrade chromedriver-debuginfoUpgrade chromium-ffmpegsumo-debuginfoUpgrade chromium-debuginfoUpgrade chromium-debugsourceUpgrade chromium | Dec 18, 2015 | Apr 19, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub