Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3166HistoryAug 13, 2014 - 4:57 a.m.
CVE-2014-3166
2014-08-1304:57:00
Debian Security Bug Tracker
security-tracker.debian.org
7
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not correctly consider the properties of SPDY connections, which allows remote attackers to obtain sensitive information by leveraging the use of multiple domain names.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | chromium-browser | < 70.0.3538.110-1~deb9u1 | chromium-browser_70.0.3538.110-1~deb9u1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2014-3166
2014-08-13 00:00:00
nessus
nessus
Google Chrome < 36.0.1985.143 Multiple Vulnerabilities
2014-07-18 00:00:00
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2320-1)
2014-08-21 00:00:00
Google Chrome < 36.0.1985.143 Multiple Vulnerabilities
2014-08-13 00:00:00
threatpost
threatpost
Google Pushes Chrome 36, Fixes 12 Issues
2014-08-15 09:23:45
prion
prion
Design/Logic Flaw
2014-08-13 04:57:00
cve
cve
CVE-2014-3166
2014-08-13 04:57:00
openvas
openvas
Google Chrome Multiple Vulnerabilities - 01 (Aug 2014) - Mac OS X
2014-08-19 00:00:00
Ubuntu: Security Advisory (USN-2320-1)
2014-08-21 00:00:00
Google Chrome Multiple Vulnerabilities - 01 (Aug 2014) - Windows
2014-08-19 00:00:00
ubuntu
ubuntu
Oxide vulnerabilities
2014-08-20 00:00:00
securityvulns
securityvulns
oxide-qt multiple security vulnerabilities
2014-08-26 00:00:00
[USN-2320-1] Oxide vulnerabilities
2014-08-26 00:00:00
Google Chrome / Chromium multiple security vulnerabilities
2014-10-05 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2014-08-12 00:00:00
chrome
chrome
Stable Channel Update
2014-08-12 00:00:00
kaspersky
kaspersky
KLA10176 Multiple vulnerabilities in Google Chrome
2014-08-13 00:00:00
debian
debian
[SECURITY] [DSA 3039-1] chromium-browser security update
2014-09-28 19:24:48
[SECURITY] [DSA 3039-1] chromium-browser security update
2014-09-28 18:48:40
osv
osv
chromium-browser - security update
2014-09-28 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2014-08-30 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related for DEBIANCVE:CVE-2014-3166