CVE-2013-6650
published 2014-01-28CVE-2013-6650: The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote…
PriorityP431high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.05%
79.3th percentile
The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages."
Affected
73 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| chrome | <= 32.0.1700.101 | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v9wp-5vcm-xwhv: The StoreBuffer::ExemptPopularPages function in store-buffer
ghsa_unreviewed·2022-05-14
CVE-2013-6650 [HIGH] CWE-20 GHSA-v9wp-5vcm-xwhv: The StoreBuffer::ExemptPopularPages function in store-buffer
The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages."
OSV
CVE-2013-6650: The StoreBuffer::ExemptPopularPages function in store-buffer
osv·2014-01-28·CVSS 7.5
CVE-2013-6650 [HIGH] CVE-2013-6650: The StoreBuffer::ExemptPopularPages function in store-buffer
The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages."
Red Hat
v8: incorrect handling of popular pages
vendor_redhat·2014-01-08·CVSS 7.5
CVE-2013-6650 [HIGH] CWE-480 v8: incorrect handling of popular pages
v8: incorrect handling of popular pages
The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages."
Package: ruby193-v8 (CloudForms Management Engine 5) - Will not fix
Package: ruby193-v8 (OpenShift Enterprise 1) - Will not fix
Package: v8 (Red Hat OpenShift Enterprise 2) - Will not fix
Package: ruby193-v8 (Red Hat OpenStack Platform 3) - Will not fix
Package: v8 (Red Hat OpenStack Platform 3) - Will not fix
Package: ruby193-v8 (Red Hat OpenStack Platform 4) - Will not fix
Package: v8 (Red Hat OpenStack Platform 4) - Will no
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-6650 v8: incorrect handling of popular pages [epel-6]
bugzilla·2014-01-29·CVSS 7.5
CVE-2013-6650 [HIGH] CVE-2013-6650 v8: incorrect handling of popular pages [epel-6]
CVE-2013-6650 v8: incorrect handling of popular pages [epel-6]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
epel-6 tracking bug for v8: see block
Bugzilla
CVE-2013-6650 v8: incorrect handling of popular pages
bugzilla·2014-01-29·CVSS 7.5
CVE-2013-6650 [HIGH] CVE-2013-6650 v8: incorrect handling of popular pages
CVE-2013-6650 v8: incorrect handling of popular pages
Common Vulnerabilities and Exposures assigned an identifier CVE-2013-6650 to
the following vulnerability:
Name: CVE-2013-6650
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6650
Assigned: 20131105
Reference: http://crbug.com/331444
Reference: http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html
Reference: https://code.google.com/p/v8/source/detail?r=18483
The StoreBuffer::ExemptPopularPages function in store-buffer.cc in
Google V8 before 3.22.24.16, as used in Google Chrome before
32.0.1700.102, allows remote attackers to cause a denial of service
(memory corruption) or possibly have unspecified other impact via
vectors that trigger incorrect handling of "popular pages."
Upstream fix:
https://
Bugzilla
CVE-2013-6650 v8: incorrect handling of popular pages [fedora-all]
bugzilla·2014-01-29·CVSS 7.5
CVE-2013-6650 [HIGH] CVE-2013-6650 v8: incorrect handling of popular pages [fedora-all]
CVE-2013-6650 v8: incorrect handling of popular pages [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multip
http://crbug.com/331444http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.htmlhttp://www.debian.org/security/2014/dsa-2862https://code.google.com/p/v8/source/detail?r=18483http://crbug.com/331444http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.htmlhttp://www.debian.org/security/2014/dsa-2862https://code.google.com/p/v8/source/detail?r=18483
2014-01-28
Published