CVE-2017-15423

Опубликовано: 06 дек. 2017

Источник: redhat

CVSS3: 4.3

Описание

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=1523137chromium-browser: issue with spake implementation in boringssl

4.3 Medium

CVSS3

Связанные уязвимости

CVE-2017-15423

CVSS3: 5.3

ubuntu

больше 7 лет назад

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

CVE-2017-15423

CVSS3: 5.3

nvd

больше 7 лет назад

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

CVE-2017-15423

CVSS3: 5.3

debian

больше 7 лет назад

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prio ...

GHSA-c95q-mpxc-wgf9

CVSS3: 5.3

github

больше 3 лет назад

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

openSUSE-SU-2017:3244-1

suse-cvrf

около 8 лет назад

Security update for chromium

4.3 Medium

CVSS3