CVE-2015-3335

🗓️ 19 Apr 2015 10:00:00Reported by mitreType

The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome before 42.0.2311.90 does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes, which might make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox

Reporter	Title	Published	Views	Family All 12
CNVD	Google Chrome memory corruption vulnerability (CNVD-2015-02654)	21 Apr 201500:00	–	cnvd
Cvelist	CVE-2015-3335	19 Apr 201510:00	–	cvelist
Debian CVE	CVE-2015-3335	19 Apr 201510:00	–	debiancve
EUVD	EUVD-2015-3381	7 Oct 202500:30	–	euvd
NVD	CVE-2015-3335	19 Apr 201510:59	–	nvd
Tenable Nessus	openSUSE Security Update : Chromium (openSUSE-2015-320)	23 Apr 201500:00	–	nessus
OpenVAS	Google Chrome Multiple Vulnerabilities-02 (Apr 2015) - Windows	21 Apr 201500:00	–	openvas
OpenVAS	Google Chrome Multiple Vulnerabilities-02 (Apr 2015) - Linux	21 Apr 201500:00	–	openvas
OpenVAS	Google Chrome Multiple Vulnerabilities-02 (Apr 2015) - Mac OS X	21 Apr 201500:00	–	openvas
Prion	Hardcoded credentials	19 Apr 201510:59	–	prion

NVD

Node

google chromeRange≤42.0.2311.60

Node

opensuse opensuseMatch13.1

opensuse opensuseMatch13.2

Source	Link
lists	www.lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
googlechromereleases	www.googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
securityfocus	www.securityfocus.com/bid/72715
code	www.code.google.com/p/chromium/issues/detail

06 May 2026 22:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.5

EPSS0.02071

CWE-264