CVE-2013-6623

Publication date 13 November 2013

Last updated 24 July 2024

Ubuntu priority

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging the use of tree order, rather than transitive dependency order, for layout.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
chromium-browser	13.10 saucy	Fixed 31.0.1650.63-0ubuntu0.13.10.1~20131204.1
	13.04 raring	Fixed 31.0.1650.63-0ubuntu0.13.04.1~20131204.1
	12.10 quantal	Fixed 31.0.1650.63-0ubuntu0.12.10.1~20131204.1
	12.04 LTS precise	Fixed 31.0.1650.63-0ubuntu0.12.04.1~20131204.1
	10.04 LTS lucid	Ignored end of life

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://src.chromium.org/viewvc/blink?revision=158480&view=revision
https://code.google.com/p/chromium/issues/detail?id=282925
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
https://www.cve.org/CVERecord?id=CVE-2013-6623