CVE-2014-1733

Publication date 26 April 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.

Read the notes from the security team

Status

Package Ubuntu Release Status
chromium-browser 14.04 LTS trusty
Fixed 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
13.10 saucy Ignored end of life
12.10 quantal Ignored end of life
12.04 LTS precise
Fixed 36.0.1985.125-0ubuntu1.12.04.0~pkg897
10.04 LTS lucid Ignored end of life
oxide-qt 14.04 LTS trusty Not in release
13.10 saucy Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release

Notes

chrisccoulson

Bug affects seccomp sandbox, which is used for the GPU process in Chrome. Oxide doesn’t have a GPU process