CVE-2015-1234 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.8 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 86%

Affected Products (NVD)

Vendor	Product	Version
google	chrome	𝑥 ≤ 41.0.2272.102

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

chromium-browser

lucid	ignored
precise	ignored
trusty	Fixed 43.0.2357.81-0ubuntu0.14.04.1.1089 released
utopic	Fixed 43.0.2357.81-0ubuntu0.14.10.1.1131 released
vivid	Fixed 43.0.2357.81-0ubuntu0.15.04.1.1170 released
wily	Fixed 43.0.2357.81-0ubuntu1.1179 released

oxide-qt

lucid	dne
precise	dne
trusty	Fixed 1.5.6-0ubuntu0.14.04.2 released
utopic	Fixed 1.5.6-0ubuntu0.14.10.1 released
vivid	Fixed 1.5.6-0ubuntu1 released
wily	Fixed 1.5.6-0ubuntu1 released

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://googlechromereleases.blogspot.com/2015/04/stable-channel-update.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html

http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html

http://rhn.redhat.com/errata/RHSA-2015-0778.html

http://www.securityfocus.com/bid/73486

http://www.securitytracker.com/id/1032012

http://www.ubuntu.com/usn/USN-2556-1

https://code.google.com/p/chromium/issues/detail?id=468936

https://codereview.chromium.org/1016193003

https://security.gentoo.org/glsa/201506-04

http://googlechromereleases.blogspot.com/2015/04/stable-channel-update.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html

http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html

http://rhn.redhat.com/errata/RHSA-2015-0778.html

http://www.securityfocus.com/bid/73486

http://www.securitytracker.com/id/1032012

http://www.ubuntu.com/usn/USN-2556-1

https://code.google.com/p/chromium/issues/detail?id=468936

https://codereview.chromium.org/1016193003

https://security.gentoo.org/glsa/201506-04