Google Chrome SSL renegotiation Remote Denial of Service Vulnerability

Bugtraq ID:	35463
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 22 2009 12:00AM
Updated:	Mar 19 2015 08:25AM
Credit:	[email protected]
Vulnerable:	Google Chrome 2.0.172 .31 Google Chrome 2.0.172 .30 Google Chrome 1.0.154 .61 Google Chrome 1.0.154.65 Google Chrome 1.0.154.64 Google Chrome 1.0.154.59 Google Chrome 1.0.154.55 Google Chrome 1.0.154.53 Google Chrome 1.0.154.48 Google Chrome 1.0.154.46 Google Chrome 1.0.154.36
Not Vulnerable:	Google Chrome 2.0.172 .33

Google Chrome SSL renegotiation Remote Denial of Service Vulnerability

Google Chrome is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Versions prior to Chrome 2.0.172.33 are vulnerable.

Google Chrome SSL renegotiation Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome SSL renegotiation Remote Denial of Service Vulnerability

Solution:
The vendor has released an update. Please see the references for details.

Google Chrome SSL renegotiation Remote Denial of Service Vulnerability

References:

• Google Chrome Homepage (Google)
  
• Issue 13226: https crashes (Google)
  
• Stable, Beta update: Security fix (Google)