Lucene search

MitreCVE-2013-6628

HistoryNov 13, 2013 - 3:55 p.m.

CVE-2013-6628

2013-11-1315:55:04

mitre

web.nvd.nist.gov

google chrome

tls

vulnerability

server certificate

interference

nvd

cve-2013-6628

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that a server’s X.509 certificate is the same during renegotiation as it was before renegotiation, which might allow remote web servers to interfere with trust relationships by renegotiating a session.

Affected configurations

Nvd

Node

googlechromeRange≤31.0.1650.47

googlechromeMatch31.0.1650.0

googlechromeMatch31.0.1650.2

googlechromeMatch31.0.1650.3

googlechromeMatch31.0.1650.4

googlechromeMatch31.0.1650.5

googlechromeMatch31.0.1650.6

googlechromeMatch31.0.1650.7

googlechromeMatch31.0.1650.8

googlechromeMatch31.0.1650.9

googlechromeMatch31.0.1650.10

googlechromeMatch31.0.1650.11

googlechromeMatch31.0.1650.12

googlechromeMatch31.0.1650.13

googlechromeMatch31.0.1650.14

googlechromeMatch31.0.1650.15

googlechromeMatch31.0.1650.16

googlechromeMatch31.0.1650.17

googlechromeMatch31.0.1650.18

googlechromeMatch31.0.1650.19

googlechromeMatch31.0.1650.20

googlechromeMatch31.0.1650.22

googlechromeMatch31.0.1650.23

googlechromeMatch31.0.1650.25

googlechromeMatch31.0.1650.26

googlechromeMatch31.0.1650.27

googlechromeMatch31.0.1650.28

googlechromeMatch31.0.1650.29

googlechromeMatch31.0.1650.30

googlechromeMatch31.0.1650.31

googlechromeMatch31.0.1650.32

googlechromeMatch31.0.1650.33

googlechromeMatch31.0.1650.34

googlechromeMatch31.0.1650.35

googlechromeMatch31.0.1650.36

googlechromeMatch31.0.1650.37

googlechromeMatch31.0.1650.38

googlechromeMatch31.0.1650.39

googlechromeMatch31.0.1650.41

googlechromeMatch31.0.1650.42

googlechromeMatch31.0.1650.43

googlechromeMatch31.0.1650.44

googlechromeMatch31.0.1650.45

googlechromeMatch31.0.1650.46

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
googlechrome31.0.1650.0cpe:2.3:a:google:chrome:31.0.1650.0:*:*:*:*:*:*:*
googlechrome31.0.1650.2cpe:2.3:a:google:chrome:31.0.1650.2:*:*:*:*:*:*:*
googlechrome31.0.1650.3cpe:2.3:a:google:chrome:31.0.1650.3:*:*:*:*:*:*:*
googlechrome31.0.1650.4cpe:2.3:a:google:chrome:31.0.1650.4:*:*:*:*:*:*:*
googlechrome31.0.1650.5cpe:2.3:a:google:chrome:31.0.1650.5:*:*:*:*:*:*:*
googlechrome31.0.1650.6cpe:2.3:a:google:chrome:31.0.1650.6:*:*:*:*:*:*:*
googlechrome31.0.1650.7cpe:2.3:a:google:chrome:31.0.1650.7:*:*:*:*:*:*:*
googlechrome31.0.1650.8cpe:2.3:a:google:chrome:31.0.1650.8:*:*:*:*:*:*:*
googlechrome31.0.1650.9cpe:2.3:a:google:chrome:31.0.1650.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::
google	chrome	31.0.1650.0	cpe:2.3:a:google:chrome:31.0.1650.0:::::::*
google	chrome	31.0.1650.2	cpe:2.3:a:google:chrome:31.0.1650.2:::::::*
google	chrome	31.0.1650.3	cpe:2.3:a:google:chrome:31.0.1650.3:::::::*
google	chrome	31.0.1650.4	cpe:2.3:a:google:chrome:31.0.1650.4:::::::*
google	chrome	31.0.1650.5	cpe:2.3:a:google:chrome:31.0.1650.5:::::::*
google	chrome	31.0.1650.6	cpe:2.3:a:google:chrome:31.0.1650.6:::::::*
google	chrome	31.0.1650.7	cpe:2.3:a:google:chrome:31.0.1650.7:::::::*
google	chrome	31.0.1650.8	cpe:2.3:a:google:chrome:31.0.1650.8:::::::*
google	chrome	31.0.1650.9	cpe:2.3:a:google:chrome:31.0.1650.9:::::::*