Description
Multiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to WebSocketJob deletion.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | chromium-browser | 34.0.1847.137-1~deb7u1 | DSA-2930-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | chromium-browser | 36.0.1985.125-0ubuntu1.14.04.0~pkg1029 | — |
| Ubuntu 14.04 LTS | oxide-qt | 1.0.4-0ubuntu0.14.04.1 | USN-2298-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 | openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10171-1 |
Advisories 4
- DSA-2930-1 chromium-browser - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2298-1 oxide-qt vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- openSUSE-SU-2024:10171-1 chromedriver-55.0.2883.75-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12948-1 ungoogled-chromium-113.0.5672.92-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://code.google.com/p/chromium/issues/detail?id=358038
- DSA-2930 vendor-advisory
- 67374 vdb-entry
- GLSA-201408-16 vendor-advisory
- http://googlechromereleases.blogspot.com/2014/05/stable-channel-update.html
- 60372 third-party-advisory
- openSUSE-SU-2014:0783 vendor-advisory
- 59155 third-party-advisory
- 1030240 vdb-entry
- https://src.chromium.org/viewvc/chrome?revision=261707&view=revision