PT-2018-2535 · Google+3 · Google Chrome+3
Klzgrad
·
Publicado
2018-12-12
·
Atualizado
2024-06-15
·
CVE-2019-5754
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 72.0.3626.81
Description
The issue is related to errors in the implementation of the QUIC network protocol. It allows a remote attacker, potentially using a malicious network proxy, to obtain cleartext of transport encryption. This could enable the attacker to access information that is supposed to be encrypted.
Recommendations
For Google Chrome versions prior to 72.0.3626.81, update to version 72.0.3626.81 or later to resolve the issue. As a temporary workaround, consider restricting the use of proxy servers to minimize the risk of exploitation.
Exploit
Correção
Use of a Broken Cryptographic Algorithm
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse