CVE catalog

CVE-2014-3174

UBUNTU-CVE-2014-3174

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.58% · Oct 25, 2026

modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianchromium-browser726.0.1410.43-1vulnerable
Debianchromium-browser727.0.1453.110-1vulnerable
Debianchromium-browser727.0.1453.110-1~deb7u1vulnerable
Debianchromium-browser727.0.1453.110-2vulnerable
Debianchromium-browser727.0.1453.93-1vulnerable
Debianchromium-browser727.0.1453.93-1~deb7u1vulnerable
Debianchromium-browser728.0.1500.71-1vulnerable
Debianchromium-browser728.0.1500.71-1~deb7u1vulnerable
Debianchromium-browser728.0.1500.71-2vulnerable
Debianchromium-browser728.0.1500.95-1vulnerable
Debianchromium-browser728.0.1500.95-1~deb7u1vulnerable
Debianchromium-browser728.0.1500.95-2vulnerable
Debianchromium-browser728.0.1500.95-3vulnerable
Debianchromium-browser729.0.1547.57-1vulnerable
Debianchromium-browser729.0.1547.57-1~deb7u1vulnerable
Debianchromium-browser729.0.1547.57-2vulnerable
Debianchromium-browser729.0.1547.57-3vulnerable
Debianchromium-browser729.0.1547.57-3+exp1vulnerable
Debianchromium-browser730.0.1599.101-1vulnerable
Debianchromium-browser730.0.1599.101-1~deb7u1vulnerable
Debianchromium-browser730.0.1599.101-2vulnerable
Debianchromium-browser730.0.1599.101-3vulnerable
Debianchromium-browser731.0.1650.57-1vulnerable
Debianchromium-browser731.0.1650.57-1~deb7u1vulnerable
Debianchromium-browser731.0.1650.63-1vulnerable
Debianchromium-browser731.0.1650.63-1~deb7u1vulnerable
Debianchromium-browser732.0.1700.123-1vulnerable
Debianchromium-browser732.0.1700.123-1~deb7u1vulnerable
Debianchromium-browser732.0.1700.123-2vulnerable
Debianchromium-browser732.0.1700.123-3vulnerable
Debianchromium-browser732.0.1700.123-4vulnerable
Debianchromium-browser733.0.1750.152-1vulnerable
Debianchromium-browser733.0.1750.152-1~deb7u1vulnerable
Debianchromium-browser734.0.1847.116-1vulnerable
Debianchromium-browser734.0.1847.116-1~deb7u1vulnerable
Debianchromium-browser734.0.1847.116-2vulnerable
Debianchromium-browser734.0.1847.132-1vulnerable
Debianchromium-browser734.0.1847.132-1~deb7u1vulnerable
Debianchromium-browser734.0.1847.137-1vulnerable
Debianchromium-browser734.0.1847.137-1~deb7u1vulnerable
Debianchromium-browser735.0.1916.114-1vulnerable
Debianchromium-browser735.0.1916.114-1~deb7u1vulnerable
Debianchromium-browser735.0.1916.114-1~deb7u2vulnerable
Debianchromium-browser735.0.1916.114-2vulnerable
Debianchromium-browser735.0.1916.153-1vulnerable
Debianchromium-browser735.0.1916.153-1~deb7u1vulnerable
Debianchromium-browser735.0.1916.153-2vulnerable
Debianchromium-browser735.0.1916.86-1vulnerable
Debianchromium-browser735.0.1916.99-1vulnerable
Debianchromium-browser736.0.1985.103-1vulnerable
Debianchromium-browser736.0.1985.125-0vulnerable
Debianchromium-browser736.0.1985.18-1vulnerable
Debianchromium-browser736.0.1985.18-2vulnerable
Debianchromium-browser736.0.1985.32-1vulnerable
Debianchromium-browser736.0.1985.35-1vulnerable
Debianchromium-browser736.0.1985.36-1vulnerable
Debianchromium-browser736.0.1985.49-1vulnerable
Debianchromium-browser736.0.1985.67-1vulnerable
Debianchromium-browser736.0.1985.84-1vulnerable
Debianchromium-browser736.0.1985.97-1vulnerable
Debianchromium-browser736.0.1985.98-1vulnerable
Debianchromium-browser737.0.2062.120-1~deb7u1fixed
Ubuntuchromium-browser14.0429.0.1547.65-0ubuntu2vulnerable
Ubuntuchromium-browser14.0431.0.1650.63-0ubuntu1~20131204.1vulnerable
Ubuntuchromium-browser14.0432.0.1700.107-0ubuntu1~20140204.977.1vulnerable
Ubuntuchromium-browser14.0433.0.1750.152-0ubuntu1~pkg995.1vulnerable
Ubuntuchromium-browser14.0434.0.1847.116-0ubuntu2vulnerable
Ubuntuchromium-browser14.0436.0.1985.125-0ubuntu1.14.04.0~pkg1029vulnerable
Ubuntuchromium-browser14.0437.0.2062.94-0ubuntu0.14.04.1~pkg1042fixed
Ubuntuoxide-qt14.041.0.0~bzr437-0ubuntu1vulnerable
Ubuntuoxide-qt14.041.0.0~bzr452-0ubuntu1vulnerable
Ubuntuoxide-qt14.041.0.0~bzr475-0ubuntu1vulnerable
Ubuntuoxide-qt14.041.0.0~bzr490-0ubuntu1vulnerable
Ubuntuoxide-qt14.041.0.0~bzr501-0ubuntu1vulnerable
Ubuntuoxide-qt14.041.0.0~bzr501-0ubuntu2vulnerable
Ubuntuoxide-qt14.041.0.4-0ubuntu0.14.04.1vulnerable
Ubuntuoxide-qt14.041.0.5-0ubuntu0.14.04.1vulnerable
Ubuntuoxide-qt14.041.1.2-0ubuntu0.14.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianchromium-browserdeb737.0.2062.120-1~deb7u1Not reportedDSA-3039-1Not reported
Ubuntuchromium-browserdeb14.0437.0.2062.94-0ubuntu0.14.04.1~pkg1042Not reportedUBUNTU-CVE-2014-3174Not reported
Ubuntuoxide-qtdeb14.041.1.2-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2014-3174Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References