Уязвимость CVE-2013-6659: Информация

Описание

The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user's expectations, by initiating a TLS renegotiation.

Важность: MEDIUM (6,4)

URL: https://nvd.nist.gov/vuln/detail/CVE-2013-6659
Опубликовано: 24 февраля 2014 г.
Изменено: 1 апреля 2014 г.
Идентификатор типа ошибки: CWE-310

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
chromiumsisyphus33.0.1750.149-alt1124.0.6367.118-alt1ALT-PU-2014-1282-1116302Исправлено
chromiump1033.0.1750.149-alt1119.0.6045.159-alt0.p10.1ALT-PU-2014-1282-1116302Исправлено
chromiump933.0.1750.149-alt197.0.4692.99-alt0.p9.1ALT-PU-2014-1282-1116302Исправлено
chromiumc10f133.0.1750.149-alt1110.0.5481.177-alt1.p10.1ALT-PU-2014-1282-1116302Исправлено
chromiumc9f233.0.1750.149-alt184.0.4147.105-alt1.1.p9ALT-PU-2014-1282-1116302Исправлено
chromiumc733.0.1750.152-alt0.M70P.138.0.2125.122-alt0.M70C.2ALT-PU-2014-1486-1118320Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
https://code.google.com/p/chromium/issues/detail?id=306959
    http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html
    • Vendor Advisory
    https://src.chromium.org/viewvc/chrome?revision=229611&view=revision
    • Patch
    openSUSE-SU-2014:0327
      DSA-2883

          1. Конфигурация 1

            cpe:2.3:a:google:chrome:33.0.1750.1:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.89:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.51:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.44:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.39:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.73:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.70:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.22:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.41:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.66:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.12:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.92:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.16:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.65:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.46:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.85:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.79:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.106:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.52:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.38:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.88:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.93:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.110:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.11:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.104:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.61:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.0:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.34:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.31:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.36:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.23:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.112:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.47:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.9:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.28:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.69:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.55:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.109:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.10:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.81:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.49:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.57:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.71:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.45:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.115:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.108:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.5:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.40:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.29:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.76:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.13:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.58:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.75:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.63:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.6:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.20:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.59:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.3:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.25:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.82:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.64:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.113:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.50:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
            End including
            33.0.1750.116
            cpe:2.3:a:google:chrome:33.0.1750.60:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.26:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.19:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.18:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.8:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.42:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.7:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.21:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.80:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.68:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.90:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.77:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.111:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.35:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.43:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.27:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.4:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.48:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.15:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.56:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.24:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.30:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.67:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.107:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.2:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.14:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.74:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.62:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.91:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.83:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.53:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.37:*:*:*:*:*:*:*
            cpe:2.3:a:google:chrome:33.0.1750.54:*:*:*:*:*:*:*
        VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
        Версия: v24.5.0
        Наверх