CVE-2013-2905: Debian Linux

Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days.

The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.

Affected products

• Debian Debian Linux: version 7.0 only
• Google Chrome: up to and including 29.0.1547.56; version 29.0.1547.0 only; version 29.0.1547.1 only; version 29.0.1547.2 only; version 29.0.1547.3 only; version 29.0.1547.4 only; …

Published 2013-08-21. Last modified 2026-06-16.