CVE-2013-6659
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user's expectations, by initiating a TLS renegotiation.
La función SSLClientSocketNSS::Core::OwnAuthCertHandler en net/socket/ssl_client_socket_nss.cc en Google Chrome anterior a 33.0.1750.117 no previene debidamente los cambios en los certificados del servidor X.509 durante las renegociaciones, lo que permite a servidores remotos de SSL provocar el uso de una cadena nueva de certificación, inconsistente con las expectativas del usuario, mediante la iniciación de una renegociación de TLS.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-11-05 CVE Reserved
- 2014-02-24 CVE Published
- 2024-08-06 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-310: Cryptographic Issues
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| https://code.google.com/p/chromium/issues/detail?id=306959 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://src.chromium.org/viewvc/chrome?revision=229611&view=revision | 2014-04-01 |
| URL | Date | SRC |
|---|---|---|
| http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html | 2014-04-01 | |
| http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html | 2014-04-01 | |
| http://www.debian.org/security/2014/dsa-2883 | 2014-04-01 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | <= 33.0.1750.116 Search vendor "Google" for product "Chrome" and version " <= 33.0.1750.116" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.0 Search vendor "Google" for product "Chrome" and version "33.0.1750.0" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.1 Search vendor "Google" for product "Chrome" and version "33.0.1750.1" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.2 Search vendor "Google" for product "Chrome" and version "33.0.1750.2" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.3 Search vendor "Google" for product "Chrome" and version "33.0.1750.3" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.4 Search vendor "Google" for product "Chrome" and version "33.0.1750.4" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.5 Search vendor "Google" for product "Chrome" and version "33.0.1750.5" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.6 Search vendor "Google" for product "Chrome" and version "33.0.1750.6" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.7 Search vendor "Google" for product "Chrome" and version "33.0.1750.7" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.8 Search vendor "Google" for product "Chrome" and version "33.0.1750.8" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.9 Search vendor "Google" for product "Chrome" and version "33.0.1750.9" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.10 Search vendor "Google" for product "Chrome" and version "33.0.1750.10" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.11 Search vendor "Google" for product "Chrome" and version "33.0.1750.11" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.12 Search vendor "Google" for product "Chrome" and version "33.0.1750.12" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.13 Search vendor "Google" for product "Chrome" and version "33.0.1750.13" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.14 Search vendor "Google" for product "Chrome" and version "33.0.1750.14" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.15 Search vendor "Google" for product "Chrome" and version "33.0.1750.15" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.16 Search vendor "Google" for product "Chrome" and version "33.0.1750.16" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.18 Search vendor "Google" for product "Chrome" and version "33.0.1750.18" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.19 Search vendor "Google" for product "Chrome" and version "33.0.1750.19" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.20 Search vendor "Google" for product "Chrome" and version "33.0.1750.20" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.21 Search vendor "Google" for product "Chrome" and version "33.0.1750.21" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.22 Search vendor "Google" for product "Chrome" and version "33.0.1750.22" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.23 Search vendor "Google" for product "Chrome" and version "33.0.1750.23" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.24 Search vendor "Google" for product "Chrome" and version "33.0.1750.24" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.25 Search vendor "Google" for product "Chrome" and version "33.0.1750.25" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.26 Search vendor "Google" for product "Chrome" and version "33.0.1750.26" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.27 Search vendor "Google" for product "Chrome" and version "33.0.1750.27" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.28 Search vendor "Google" for product "Chrome" and version "33.0.1750.28" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.29 Search vendor "Google" for product "Chrome" and version "33.0.1750.29" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.30 Search vendor "Google" for product "Chrome" and version "33.0.1750.30" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.31 Search vendor "Google" for product "Chrome" and version "33.0.1750.31" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.34 Search vendor "Google" for product "Chrome" and version "33.0.1750.34" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.35 Search vendor "Google" for product "Chrome" and version "33.0.1750.35" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.36 Search vendor "Google" for product "Chrome" and version "33.0.1750.36" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.37 Search vendor "Google" for product "Chrome" and version "33.0.1750.37" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.38 Search vendor "Google" for product "Chrome" and version "33.0.1750.38" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.39 Search vendor "Google" for product "Chrome" and version "33.0.1750.39" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.40 Search vendor "Google" for product "Chrome" and version "33.0.1750.40" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.41 Search vendor "Google" for product "Chrome" and version "33.0.1750.41" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.42 Search vendor "Google" for product "Chrome" and version "33.0.1750.42" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.43 Search vendor "Google" for product "Chrome" and version "33.0.1750.43" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.44 Search vendor "Google" for product "Chrome" and version "33.0.1750.44" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.45 Search vendor "Google" for product "Chrome" and version "33.0.1750.45" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.46 Search vendor "Google" for product "Chrome" and version "33.0.1750.46" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.47 Search vendor "Google" for product "Chrome" and version "33.0.1750.47" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.48 Search vendor "Google" for product "Chrome" and version "33.0.1750.48" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.49 Search vendor "Google" for product "Chrome" and version "33.0.1750.49" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.50 Search vendor "Google" for product "Chrome" and version "33.0.1750.50" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.51 Search vendor "Google" for product "Chrome" and version "33.0.1750.51" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.52 Search vendor "Google" for product "Chrome" and version "33.0.1750.52" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.53 Search vendor "Google" for product "Chrome" and version "33.0.1750.53" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.54 Search vendor "Google" for product "Chrome" and version "33.0.1750.54" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.55 Search vendor "Google" for product "Chrome" and version "33.0.1750.55" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.56 Search vendor "Google" for product "Chrome" and version "33.0.1750.56" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.57 Search vendor "Google" for product "Chrome" and version "33.0.1750.57" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.58 Search vendor "Google" for product "Chrome" and version "33.0.1750.58" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.59 Search vendor "Google" for product "Chrome" and version "33.0.1750.59" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.60 Search vendor "Google" for product "Chrome" and version "33.0.1750.60" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.61 Search vendor "Google" for product "Chrome" and version "33.0.1750.61" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.62 Search vendor "Google" for product "Chrome" and version "33.0.1750.62" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.63 Search vendor "Google" for product "Chrome" and version "33.0.1750.63" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.64 Search vendor "Google" for product "Chrome" and version "33.0.1750.64" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.65 Search vendor "Google" for product "Chrome" and version "33.0.1750.65" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.66 Search vendor "Google" for product "Chrome" and version "33.0.1750.66" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.67 Search vendor "Google" for product "Chrome" and version "33.0.1750.67" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.68 Search vendor "Google" for product "Chrome" and version "33.0.1750.68" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.69 Search vendor "Google" for product "Chrome" and version "33.0.1750.69" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.70 Search vendor "Google" for product "Chrome" and version "33.0.1750.70" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.71 Search vendor "Google" for product "Chrome" and version "33.0.1750.71" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.73 Search vendor "Google" for product "Chrome" and version "33.0.1750.73" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.74 Search vendor "Google" for product "Chrome" and version "33.0.1750.74" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.75 Search vendor "Google" for product "Chrome" and version "33.0.1750.75" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.76 Search vendor "Google" for product "Chrome" and version "33.0.1750.76" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.77 Search vendor "Google" for product "Chrome" and version "33.0.1750.77" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.79 Search vendor "Google" for product "Chrome" and version "33.0.1750.79" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.80 Search vendor "Google" for product "Chrome" and version "33.0.1750.80" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.81 Search vendor "Google" for product "Chrome" and version "33.0.1750.81" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.82 Search vendor "Google" for product "Chrome" and version "33.0.1750.82" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.83 Search vendor "Google" for product "Chrome" and version "33.0.1750.83" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.85 Search vendor "Google" for product "Chrome" and version "33.0.1750.85" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.88 Search vendor "Google" for product "Chrome" and version "33.0.1750.88" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.89 Search vendor "Google" for product "Chrome" and version "33.0.1750.89" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.90 Search vendor "Google" for product "Chrome" and version "33.0.1750.90" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.91 Search vendor "Google" for product "Chrome" and version "33.0.1750.91" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.92 Search vendor "Google" for product "Chrome" and version "33.0.1750.92" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.93 Search vendor "Google" for product "Chrome" and version "33.0.1750.93" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.104 Search vendor "Google" for product "Chrome" and version "33.0.1750.104" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.106 Search vendor "Google" for product "Chrome" and version "33.0.1750.106" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.107 Search vendor "Google" for product "Chrome" and version "33.0.1750.107" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.108 Search vendor "Google" for product "Chrome" and version "33.0.1750.108" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.109 Search vendor "Google" for product "Chrome" and version "33.0.1750.109" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.110 Search vendor "Google" for product "Chrome" and version "33.0.1750.110" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.111 Search vendor "Google" for product "Chrome" and version "33.0.1750.111" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.112 Search vendor "Google" for product "Chrome" and version "33.0.1750.112" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.113 Search vendor "Google" for product "Chrome" and version "33.0.1750.113" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 33.0.1750.115 Search vendor "Google" for product "Chrome" and version "33.0.1750.115" | - |
Affected
| ||||||