CVE-2014-1729
published 2014-04-09CVE-2014-1729: Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of…
PriorityP431high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.39%
69.5th percentile
Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 34.0.1847.115 | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4cqg-g3vf-73q9: Multiple unspecified vulnerabilities in Google V8 before 3
ghsa_unreviewed·2022-05-17
CVE-2014-1729 [HIGH] GHSA-4cqg-g3vf-73q9: Multiple unspecified vulnerabilities in Google V8 before 3
Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
OSV
CVE-2014-1729: Multiple unspecified vulnerabilities in Google V8 before 3
osv·2014-04-09·CVSS 7.5
CVE-2014-1729 [HIGH] CVE-2014-1729: Multiple unspecified vulnerabilities in Google V8 before 3
Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Red Hat
v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116
vendor_redhat·2014-02-27·CVSS 7.5
CVE-2014-1729 [HIGH] v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116
v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116
Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Package: ruby193-v8 (CloudForms Management Engine 5) - Not affected
Package: ruby193-v8 (OpenShift Enterprise 1) - Not affected
Package: v8 (Red Hat OpenShift Enterprise 2) - Not affected
Package: ruby193-v8 (Red Hat OpenStack Platform 3) - Not affected
Package: v8 (Red Hat OpenStack Platform 3) - Not affected
Package: ruby193-v8 (Red Hat OpenStack Platform 4) - Not affected
Package: v8 (Red Hat OpenStack Platform 4) - Not affected
Package: v8 (Red Hat Satellite 6) - Not affected
Package: v8314-
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116 [fedora-all]
bugzilla·2014-04-10·CVSS 7.5
CVE-2014-1729 [HIGH] CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116 [fedora-all]
CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116 [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Bugzilla
CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116
bugzilla·2014-04-10·CVSS 7.5
CVE-2014-1729 [HIGH] CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116
CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116
Common Vulnerabilities and Exposures assigned an identifier CVE-2014-1729 to
the following vulnerability:
Name: CVE-2014-1729
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1729
Assigned: 20140129
Reference: http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html
Reference: https://code.google.com/p/chromium/issues/detail?id=345820
Reference: https://code.google.com/p/chromium/issues/detail?id=347262
Reference: https://code.google.com/p/chromium/issues/detail?id=348319
Reference: https://code.google.com/p/chromium/issues/detail?id=350863
Reference: https://code.google.com/p/chromium/issues/detail?id=352982
Reference: https://code.google.com/p/chromium/issues/detail
Bugzilla
CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116 [epel-6]
bugzilla·2014-04-10·CVSS 7.5
CVE-2014-1729 [HIGH] CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116 [epel-6]
CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116 [epel-6]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Bugzilla
CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146
bugzilla·2014-03-11·CVSS 7.5
CVE-2013-6668 [HIGH] CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146
CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146
The Google Chrome 3.24.35.10 release[1] fixed a number of vulnerabilities in v8:
343964
https://codereview.chromium.org/170343003
https://code.google.com/p/chromium/issues/detail?id=343964
344186
https://codereview.chromium.org/172093002
https://code.google.com/p/chromium/issues/detail?id=344186
347909
https://codereview.chromium.org/184393002
https://code.google.com/p/chromium/issues/detail?id=347909
From an initial inspection, these all require untrusted JavaScript to be parsed to trigger the issues. As such, these should have a moderate or low impact for the way v8 is used in Red Hat products.
[1] http://googlechromereleases.blogspot.com.au/2014/03/stable-channel-update.html
Discussion:
Creat
http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.htmlhttp://lists.opensuse.org/opensuse-updates/2014-05/msg00012.htmlhttp://security.gentoo.org/glsa/glsa-201408-16.xmlhttp://www.debian.org/security/2014/dsa-2905https://code.google.com/p/chromium/issues/detail?id=345820https://code.google.com/p/chromium/issues/detail?id=347262https://code.google.com/p/chromium/issues/detail?id=348319https://code.google.com/p/chromium/issues/detail?id=350863https://code.google.com/p/chromium/issues/detail?id=352982https://code.google.com/p/chromium/issues/detail?id=355586https://code.google.com/p/chromium/issues/detail?id=358059https://code.google.com/p/v8/source/detail?r=19572https://code.google.com/p/v8/source/detail?r=19584https://code.google.com/p/v8/source/detail?r=19923https://code.google.com/p/v8/source/detail?r=20033https://code.google.com/p/v8/source/detail?r=20345https://code.google.com/p/v8/source/detail?r=20409http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.htmlhttp://lists.opensuse.org/opensuse-updates/2014-05/msg00012.htmlhttp://security.gentoo.org/glsa/glsa-201408-16.xmlhttp://www.debian.org/security/2014/dsa-2905https://code.google.com/p/chromium/issues/detail?id=345820https://code.google.com/p/chromium/issues/detail?id=347262https://code.google.com/p/chromium/issues/detail?id=348319https://code.google.com/p/chromium/issues/detail?id=350863https://code.google.com/p/chromium/issues/detail?id=352982https://code.google.com/p/chromium/issues/detail?id=355586https://code.google.com/p/chromium/issues/detail?id=358059https://code.google.com/p/v8/source/detail?r=19572https://code.google.com/p/v8/source/detail?r=19584https://code.google.com/p/v8/source/detail?r=19923https://code.google.com/p/v8/source/detail?r=20033https://code.google.com/p/v8/source/detail?r=20345https://code.google.com/p/v8/source/detail?r=20409
2014-04-09
Published