Google Chrome up to 32.0.1700.107 TLS Handshake cryptographic issues
| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 3.8 | $0-$5k | 0.00 |
Summary
A vulnerability classified as problematic has been found in Google Chrome up to 32.0.1700.107. Affected is an unknown function of the component TLS Handshake Handler. The manipulation leads to cryptographic issues. This vulnerability is traded as CVE-2013-6659. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component. If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Details
A vulnerability was found in Google Chrome up to 32.0.1700.107 (Web Browser). It has been rated as problematic. This issue affects an unknown function of the component TLS Handshake Handler. The manipulation with an unknown input leads to a cryptographic issues vulnerability. Using CWE to declare the problem leads to CWE-310. Impacted is integrity. The summary by CVE is:
The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user s expectations, by initiating a TLS renegotiation.
The weakness was presented 02/20/2014 by Antoine Delignat-Lavaud (Cloudfuzzer) with Google as Stable Channel Update as confirmed release notes (Blog). It is possible to read the advisory at googlechromereleases.blogspot.ch. The identification of this vulnerability is CVE-2013-6659 since 11/05/2013. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1600 according to MITRE ATT&CK. The advisory points out:
Many of the [above] bugs were detected using AddressSanitizer.
The vulnerability scanner Nessus provides a plugin with the ID 73164 (Debian DSA-2883-1 : chromium-browser - security update), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Debian Local Security Checks. The commercial vulnerability scanner Qualys is able to test this issue with plugin 122901 (Debian Security Update for chromium-browser (DSA 2883-1)).
Upgrading to version 33.0.1750.117 eliminates this vulnerability. The upgrade is hosted for download at chrome.google.com. A possible mitigation has been published immediately after the disclosure of the vulnerability. The release notes contains the following remark:
This update includes 28 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting.
The vulnerability is also documented in the databases at X-Force (91236), Tenable (73164), SecurityFocus (BID 65699†), Secunia (SA57028†) and Vulnerability Center (SBV-43364†). See VDB-5661, VDB-5662, VDB-10842 and VDB-10843 for similar entries. If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 4.3VulDB Meta Temp Score: 3.8
VulDB Base Score: 4.3
VulDB Temp Score: 3.8
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Cryptographic issuesCWE: CWE-310
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Unproven
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | unlock | unlock | unlock | unlock |
|---|---|---|---|---|
| Today | unlock | unlock | unlock | unlock |
Nessus ID: 73164
Nessus Name: Debian DSA-2883-1 : chromium-browser - security update
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
OpenVAS ID: 702883
OpenVAS Name: Debian Security Advisory DSA 2883-1 (chromium-browser - security update
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Upgrade: Chrome 33.0.1750.117
Timeline
11/05/2013 🔍02/20/2014 🔍
02/20/2014 🔍
02/20/2014 🔍
02/20/2014 🔍
02/21/2014 🔍
02/23/2014 🔍
02/23/2014 🔍
02/23/2014 🔍
06/09/2021 🔍
Sources
Vendor: google.comProduct: google.com
Advisory: Stable Channel Update
Researcher: Antoine Delignat-Lavaud (Cloudfuzzer)
Organization: Google
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2013-6659 (🔍)
GCVE (CVE): GCVE-0-2013-6659
GCVE (VulDB): GCVE-100-12383
OVAL: 🔍
IAVM: 🔍
X-Force: 91236 - Google Chrome TLS handshake unspecified, Medium Risk
SecurityFocus: 65699 - Google Chrome Prior to 33.0.1750.117 Multiple Security Vulnerabilities
Secunia: 57028 - Google Chrome Multiple Vulnerabilities, Highly Critical
Vulnerability Center: 43364 - Google Chrome before 33.0.1750.117 Remote Unspecified Vulnerability in Certificates Validation in TLS Handshake, Medium
See also: 🔍
Entry
Created: 02/23/2014 11:59 AMUpdated: 06/09/2021 06:23 PM
Changes: 02/23/2014 11:59 AM (87), 05/21/2017 02:21 PM (8), 06/09/2021 06:23 PM (3)
Complete: 🔍
Cache ID: 18:024:40
No comments yet. Languages: en.
Please log in to comment.