CVE-2013-6659 - CVE House
Back to Database
Status published Medium CVE-2013-6659

The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117...

Vulnerability Description

The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user's expectations, by initiating a TLS renegotiation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6659

Credits & Attribution

No credits recorded in the NVD database.

References

More from google

View All →
CVE-2025-24959
Environment Variable Injection for dotenv API in zx
Low 1
CVE-2024-45601
Local file Inclusion via static file serving functionality in Mesop
High 7.5
CVE-2022-3708
Web Stories <= 1.24.0 - Server Side Request Forgery
Critical 9.6
CVE-2022-31055
Improper Access Control in kctf
High 7.5
CVE-2022-23569
`CHECK`-fails when building invalid tensor shapes in Tensorflow
Medium 6.5

Affected Vendor

Affected Software

chrome
Vulnerable Versions:
0, 33.0.1750.0, 33.0.1750.1, 33.0.1750.2, 33.0.1750.3, 33.0.1750.4, 33.0.1750.5, 33.0.1750.6, 33.0.1750.7, 33.0.1750.8, 33.0.1750.9, 33.0.1750.10, 33.0.1750.11, 33.0.1750.12, 33.0.1750.13, 33.0.1750.14, 33.0.1750.15, 33.0.1750.16, 33.0.1750.18, 33.0.1750.19, 33.0.1750.20, 33.0.1750.21, 33.0.1750.22, 33.0.1750.23, 33.0.1750.24, 33.0.1750.25, 33.0.1750.26, 33.0.1750.27, 33.0.1750.28, 33.0.1750.29, 33.0.1750.30, 33.0.1750.31, 33.0.1750.34, 33.0.1750.35, 33.0.1750.36, 33.0.1750.37, 33.0.1750.38, 33.0.1750.39, 33.0.1750.40, 33.0.1750.41, 33.0.1750.42, 33.0.1750.43, 33.0.1750.44, 33.0.1750.45, 33.0.1750.46, 33.0.1750.47, 33.0.1750.48, 33.0.1750.49, 33.0.1750.50, 33.0.1750.51, 33.0.1750.52, 33.0.1750.53, 33.0.1750.54, 33.0.1750.55, 33.0.1750.56, 33.0.1750.57, 33.0.1750.58, 33.0.1750.59, 33.0.1750.60, 33.0.1750.61, 33.0.1750.62, 33.0.1750.63, 33.0.1750.64, 33.0.1750.65, 33.0.1750.66, 33.0.1750.67, 33.0.1750.68, 33.0.1750.69, 33.0.1750.70, 33.0.1750.71, 33.0.1750.73, 33.0.1750.74, 33.0.1750.75, 33.0.1750.76, 33.0.1750.77, 33.0.1750.79, 33.0.1750.80, 33.0.1750.81, 33.0.1750.82, 33.0.1750.83, 33.0.1750.85, 33.0.1750.88, 33.0.1750.89, 33.0.1750.90, 33.0.1750.91, 33.0.1750.92, 33.0.1750.93, 33.0.1750.104, 33.0.1750.106, 33.0.1750.107, 33.0.1750.108, 33.0.1750.109, 33.0.1750.110, 33.0.1750.111, 33.0.1750.112, 33.0.1750.113, 33.0.1750.115

Timeline

Official Publish: February 24th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.