Lucene search

K
cve[email protected]CVE-2013-6627
HistoryNov 13, 2013 - 3:55 p.m.

CVE-2013-6627

2013-11-1315:55:04
CWE-119
web.nvd.nist.gov
49
google chrome
denial of service
cve-2013-6627
security vulnerability
http
informational status code

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.9 Medium

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.5%

net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows remote web servers to cause a denial of service (out-of-bounds read) via a crafted response.

Affected configurations

NVD
Node
googlechromeRange31.0.1650.47
OR
googlechromeMatch31.0.1650.0
OR
googlechromeMatch31.0.1650.2
OR
googlechromeMatch31.0.1650.3
OR
googlechromeMatch31.0.1650.4
OR
googlechromeMatch31.0.1650.5
OR
googlechromeMatch31.0.1650.6
OR
googlechromeMatch31.0.1650.7
OR
googlechromeMatch31.0.1650.8
OR
googlechromeMatch31.0.1650.9
OR
googlechromeMatch31.0.1650.10
OR
googlechromeMatch31.0.1650.11
OR
googlechromeMatch31.0.1650.12
OR
googlechromeMatch31.0.1650.13
OR
googlechromeMatch31.0.1650.14
OR
googlechromeMatch31.0.1650.15
OR
googlechromeMatch31.0.1650.16
OR
googlechromeMatch31.0.1650.17
OR
googlechromeMatch31.0.1650.18
OR
googlechromeMatch31.0.1650.19
OR
googlechromeMatch31.0.1650.20
OR
googlechromeMatch31.0.1650.22
OR
googlechromeMatch31.0.1650.23
OR
googlechromeMatch31.0.1650.25
OR
googlechromeMatch31.0.1650.26
OR
googlechromeMatch31.0.1650.27
OR
googlechromeMatch31.0.1650.28
OR
googlechromeMatch31.0.1650.29
OR
googlechromeMatch31.0.1650.30
OR
googlechromeMatch31.0.1650.31
OR
googlechromeMatch31.0.1650.32
OR
googlechromeMatch31.0.1650.33
OR
googlechromeMatch31.0.1650.34
OR
googlechromeMatch31.0.1650.35
OR
googlechromeMatch31.0.1650.36
OR
googlechromeMatch31.0.1650.37
OR
googlechromeMatch31.0.1650.38
OR
googlechromeMatch31.0.1650.39
OR
googlechromeMatch31.0.1650.41
OR
googlechromeMatch31.0.1650.42
OR
googlechromeMatch31.0.1650.43
OR
googlechromeMatch31.0.1650.44
OR
googlechromeMatch31.0.1650.45
OR
googlechromeMatch31.0.1650.46

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.9 Medium

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.5%