CVE-2013-6639

Upstream information

CVE-2013-6639 at MITRE

Description

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index.

---

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

SUSE Bugzilla entry: 854473 [RESOLVED / FIXED]

SUSE Security Advisories:

• openSUSE-SU-2013:1927-1, published Mon, 23 Dec 2013 15:04:16 +0100 (CET)
• openSUSE-SU-2013:1933-1, published Mon, 23 Dec 2013 15:06:12 +0100 (CET)
• openSUSE-SU-2013:1960-1, published Wed, 25 Dec 2013 18:09:56 +0100 (CET)
• openSUSE-SU-2013:1962-1, published Wed, 25 Dec 2013 18:10:24 +0100 (CET)
• openSUSE-SU-2014:0065-1, published Wed, 15 Jan 2014 11:04:14 +0100 (CET)
• openSUSE-SU-2014:0092-1, published Mon, 20 Jan 2014 12:04:16 +0100 (CET)

List of released packages

Product(s)	Fixed package version(s)	References
openSUSE 13.1	chromedriver >= 31.0.1650.63-13.7 chromedriver-debuginfo >= 31.0.1650.63-13.7 chromium >= 31.0.1650.63-13.7 chromium-debuginfo >= 31.0.1650.63-13.7 chromium-debugsource >= 31.0.1650.63-13.7 chromium-desktop-gnome >= 31.0.1650.63-13.7 chromium-desktop-kde >= 31.0.1650.63-13.7 chromium-ffmpegsumo >= 31.0.1650.63-13.7 chromium-ffmpegsumo-debuginfo >= 31.0.1650.63-13.7 chromium-suid-helper >= 31.0.1650.63-13.7 chromium-suid-helper-debuginfo >= 31.0.1650.63-13.7 libv8-3 >= 3.22.24.8-2.4.1 libv8-3-debuginfo >= 3.22.24.8-2.4.1 v8 >= 3.22.24.8-2.4.1 v8-devel >= 3.22.24.8-2.4.1 v8-private-headers-devel >= 3.22.24.8-2.4.1	Patchnames: openSUSE-2013-1026 openSUSE-2014-37
openSUSE Tumbleweed	chromedriver >= 55.0.2883.75-3.1 chromium >= 55.0.2883.75-3.1 libv8-5 >= 5.3.171-4.1 v8 >= 5.3.171-4.1 v8-devel >= 5.3.171-4.1 v8-private-headers-devel >= 5.3.171-4.1	Patchnames: openSUSE Tumbleweed GA chromedriver openSUSE Tumbleweed GA libv8-5