CVE Vulnerabilities

CVE-2013-6659

Published: Feb 24, 2014 | Modified: Apr 01, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the users expectations, by initiating a TLS renegotiation.

Affected Software

Name Vendor Start Version End Version
Chrome Google * 33.0.1750.116 (including)
Chrome Google 33.0.1750.0 (including) 33.0.1750.0 (including)
Chrome Google 33.0.1750.1 (including) 33.0.1750.1 (including)
Chrome Google 33.0.1750.2 (including) 33.0.1750.2 (including)
Chrome Google 33.0.1750.3 (including) 33.0.1750.3 (including)
Chrome Google 33.0.1750.4 (including) 33.0.1750.4 (including)
Chrome Google 33.0.1750.5 (including) 33.0.1750.5 (including)
Chrome Google 33.0.1750.6 (including) 33.0.1750.6 (including)
Chrome Google 33.0.1750.7 (including) 33.0.1750.7 (including)
Chrome Google 33.0.1750.8 (including) 33.0.1750.8 (including)
Chrome Google 33.0.1750.9 (including) 33.0.1750.9 (including)
Chrome Google 33.0.1750.10 (including) 33.0.1750.10 (including)
Chrome Google 33.0.1750.11 (including) 33.0.1750.11 (including)
Chrome Google 33.0.1750.12 (including) 33.0.1750.12 (including)
Chrome Google 33.0.1750.13 (including) 33.0.1750.13 (including)
Chrome Google 33.0.1750.14 (including) 33.0.1750.14 (including)
Chrome Google 33.0.1750.15 (including) 33.0.1750.15 (including)
Chrome Google 33.0.1750.16 (including) 33.0.1750.16 (including)
Chrome Google 33.0.1750.18 (including) 33.0.1750.18 (including)
Chrome Google 33.0.1750.19 (including) 33.0.1750.19 (including)
Chrome Google 33.0.1750.20 (including) 33.0.1750.20 (including)
Chrome Google 33.0.1750.21 (including) 33.0.1750.21 (including)
Chrome Google 33.0.1750.22 (including) 33.0.1750.22 (including)
Chrome Google 33.0.1750.23 (including) 33.0.1750.23 (including)
Chrome Google 33.0.1750.24 (including) 33.0.1750.24 (including)
Chrome Google 33.0.1750.25 (including) 33.0.1750.25 (including)
Chrome Google 33.0.1750.26 (including) 33.0.1750.26 (including)
Chrome Google 33.0.1750.27 (including) 33.0.1750.27 (including)
Chrome Google 33.0.1750.28 (including) 33.0.1750.28 (including)
Chrome Google 33.0.1750.29 (including) 33.0.1750.29 (including)
Chrome Google 33.0.1750.30 (including) 33.0.1750.30 (including)
Chrome Google 33.0.1750.31 (including) 33.0.1750.31 (including)
Chrome Google 33.0.1750.34 (including) 33.0.1750.34 (including)
Chrome Google 33.0.1750.35 (including) 33.0.1750.35 (including)
Chrome Google 33.0.1750.36 (including) 33.0.1750.36 (including)
Chrome Google 33.0.1750.37 (including) 33.0.1750.37 (including)
Chrome Google 33.0.1750.38 (including) 33.0.1750.38 (including)
Chrome Google 33.0.1750.39 (including) 33.0.1750.39 (including)
Chrome Google 33.0.1750.40 (including) 33.0.1750.40 (including)
Chrome Google 33.0.1750.41 (including) 33.0.1750.41 (including)
Chrome Google 33.0.1750.42 (including) 33.0.1750.42 (including)
Chrome Google 33.0.1750.43 (including) 33.0.1750.43 (including)
Chrome Google 33.0.1750.44 (including) 33.0.1750.44 (including)
Chrome Google 33.0.1750.45 (including) 33.0.1750.45 (including)
Chrome Google 33.0.1750.46 (including) 33.0.1750.46 (including)
Chrome Google 33.0.1750.47 (including) 33.0.1750.47 (including)
Chrome Google 33.0.1750.48 (including) 33.0.1750.48 (including)
Chrome Google 33.0.1750.49 (including) 33.0.1750.49 (including)
Chrome Google 33.0.1750.50 (including) 33.0.1750.50 (including)
Chrome Google 33.0.1750.51 (including) 33.0.1750.51 (including)
Chrome Google 33.0.1750.52 (including) 33.0.1750.52 (including)
Chrome Google 33.0.1750.53 (including) 33.0.1750.53 (including)
Chrome Google 33.0.1750.54 (including) 33.0.1750.54 (including)
Chrome Google 33.0.1750.55 (including) 33.0.1750.55 (including)
Chrome Google 33.0.1750.56 (including) 33.0.1750.56 (including)
Chrome Google 33.0.1750.57 (including) 33.0.1750.57 (including)
Chrome Google 33.0.1750.58 (including) 33.0.1750.58 (including)
Chrome Google 33.0.1750.59 (including) 33.0.1750.59 (including)
Chrome Google 33.0.1750.60 (including) 33.0.1750.60 (including)
Chrome Google 33.0.1750.61 (including) 33.0.1750.61 (including)
Chrome Google 33.0.1750.62 (including) 33.0.1750.62 (including)
Chrome Google 33.0.1750.63 (including) 33.0.1750.63 (including)
Chrome Google 33.0.1750.64 (including) 33.0.1750.64 (including)
Chrome Google 33.0.1750.65 (including) 33.0.1750.65 (including)
Chrome Google 33.0.1750.66 (including) 33.0.1750.66 (including)
Chrome Google 33.0.1750.67 (including) 33.0.1750.67 (including)
Chrome Google 33.0.1750.68 (including) 33.0.1750.68 (including)
Chrome Google 33.0.1750.69 (including) 33.0.1750.69 (including)
Chrome Google 33.0.1750.70 (including) 33.0.1750.70 (including)
Chrome Google 33.0.1750.71 (including) 33.0.1750.71 (including)
Chrome Google 33.0.1750.73 (including) 33.0.1750.73 (including)
Chrome Google 33.0.1750.74 (including) 33.0.1750.74 (including)
Chrome Google 33.0.1750.75 (including) 33.0.1750.75 (including)
Chrome Google 33.0.1750.76 (including) 33.0.1750.76 (including)
Chrome Google 33.0.1750.77 (including) 33.0.1750.77 (including)
Chrome Google 33.0.1750.79 (including) 33.0.1750.79 (including)
Chrome Google 33.0.1750.80 (including) 33.0.1750.80 (including)
Chrome Google 33.0.1750.81 (including) 33.0.1750.81 (including)
Chrome Google 33.0.1750.82 (including) 33.0.1750.82 (including)
Chrome Google 33.0.1750.83 (including) 33.0.1750.83 (including)
Chrome Google 33.0.1750.85 (including) 33.0.1750.85 (including)
Chrome Google 33.0.1750.88 (including) 33.0.1750.88 (including)
Chrome Google 33.0.1750.89 (including) 33.0.1750.89 (including)
Chrome Google 33.0.1750.90 (including) 33.0.1750.90 (including)
Chrome Google 33.0.1750.91 (including) 33.0.1750.91 (including)
Chrome Google 33.0.1750.92 (including) 33.0.1750.92 (including)
Chrome Google 33.0.1750.93 (including) 33.0.1750.93 (including)
Chrome Google 33.0.1750.104 (including) 33.0.1750.104 (including)
Chrome Google 33.0.1750.106 (including) 33.0.1750.106 (including)
Chrome Google 33.0.1750.107 (including) 33.0.1750.107 (including)
Chrome Google 33.0.1750.108 (including) 33.0.1750.108 (including)
Chrome Google 33.0.1750.109 (including) 33.0.1750.109 (including)
Chrome Google 33.0.1750.110 (including) 33.0.1750.110 (including)
Chrome Google 33.0.1750.111 (including) 33.0.1750.111 (including)
Chrome Google 33.0.1750.112 (including) 33.0.1750.112 (including)
Chrome Google 33.0.1750.113 (including) 33.0.1750.113 (including)
Chrome Google 33.0.1750.115 (including) 33.0.1750.115 (including)

References