CVE-2016-1694

MEDIUM · 5.3 CVSS Gepubliceerd: 06-06-2016 CWE-284

Beschrijving

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

Vendors

Google Debian Opensuse Redhat Suse

Affected products

Chrome Debian Linux Leap Opensuse Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Linux Enterprise

References

googlechromereleases.blogspot.com
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.debian.org
www.securityfocus.com
www.securitytracker.com
access.redhat.com
codereview.chromium.org
crbug.com
security.gentoo.org