CVE-2013-6628
Estado: ModificadaMedia (4.3)—
Gravedad4.3Media · CVSS 2.0
Probabilidad de explotación0.99 %mayor que el 62 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado
net/socket/ssl_client_socket_nss.cc en la implementación TLS de Google Chrome anterior a la versión 31.0.1650.48 no asegura que el certificado del servidor es el mismo durante la renegociación como lo fue antes de la renegociación, lo que podría permitir en servidores web remotos interferir con relaciones de confianza mediante la renegociación de una sesión.
CVSS
- Puntuación base
- 4.3
- Versión
- 2.0
- Vector
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.99 %
- Percentil entre todas las CVEs puntuadas
- 62
- Fecha de la puntuación
- 21/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
Mostrar las 20 referencias
- http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
- http://www.debian.org/security/2013/dsa-2799
- https://code.google.com/p/chromium/issues/detail?id=306959
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19108
- https://secure-resumption.com/
- https://src.chromium.org/viewvc/chrome?revision=229611&view=revision
- http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
- http://www.debian.org/security/2013/dsa-2799
- https://code.google.com/p/chromium/issues/detail?id=306959
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19108
- https://secure-resumption.com/
- https://src.chromium.org/viewvc/chrome?revision=229611&view=revision
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-6628",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-11-13T15:55:04.407",
"references": [
{
"url": "http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2013/dsa-2799",
"source": "cve@mitre.org"
},
{
"url": "https://code.google.com/p/chromium/issues/detail?id=306959",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19108",
"source": "cve@mitre.org"
},
{
"url": "https://secure-resumption.com/",
"source": "cve@mitre.org"
},
{
"url": "https://src.chromium.org/viewvc/chrome?revision=229611&view=revision",
"source": "cve@mitre.org"
},
{
"url": "http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2013/dsa-2799",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://code.google.com/p/chromium/issues/detail?id=306959",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19108",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://secure-resumption.com/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://src.chromium.org/viewvc/chrome?revision=229611&view=revision",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which might allow remote web servers to interfere with trust relationships by renegotiating a session."
},
{
"lang": "es",
"value": "net/socket/ssl_client_socket_nss.cc en la implementación TLS de Google Chrome anterior a la versión 31.0.1650.48 no asegura que el certificado del servidor es el mismo durante la renegociación como lo fue antes de la renegociación, lo que podría permitir en servidores web remotos interferir con relaciones de confianza mediante la renegociación de una sesión."
}
],
"lastModified": "2026-06-17T00:00:40.727",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D96E10B-3A68-42C3-BC76-16371F70EFB1",
"versionEndIncluding": "31.0.1650.47"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECE0CD4B-7AF0-408C-A0A4-5C1BF99DCC6F"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E419AD3-959E-4CBE-AA82-6FF50ADA5F7D"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BB7361C-D835-4EA4-A02A-517A88235E48"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B8FBD4F-A625-4481-ACC3-11D1EC38E61F"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54CE56C0-FEBB-4B88-B492-7F4834F1E7D5"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7C5BFB2-1662-40C8-91F3-BAADA15BBDB7"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1591A0BA-598A-4B52-990B-D897D0717659"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2399FF12-3C99-4822-9C7F-ACE21A75B07D"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A0F6EDE-7B69-4522-880B-5D384BA165B2"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F05FCCF-7EF3-4AE8-9699-C59716B64FEC"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ABC4ED3-D2F4-49E4-917C-14CBD4B48217"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7DACE52-4FEE-46DB-8A3E-453927346324"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBB25316-F742-489F-982A-F2E93CC2A991"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DCDDE4F-1AFF-47BB-AEED-1162557C3ED5"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DC97D41-FC3F-4257-ADCF-A18CE16BD123"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08BB30B1-5D2B-4BF0-A9B2-E9DA58DB4421"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D94E9E7-694E-4D4D-87E3-C599BF0D34E0"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95693DB4-F3A3-4E9B-81BC-9659DC28266F"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "543A3EED-3B52-4F32-91CB-CE519502DAFC"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA826854-B16A-4F3B-9B45-B20967C398CD"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D5EBF2E-E025-4F7F-8B59-E898526509CA"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57710E9D-5ACE-43B8-87E9-B62FE8602316"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2094C58D-F541-4622-8A85-0F29E8FA2C79"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "170A2964-5947-4DDB-8AE2-C919BEF38DF0"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "095EF1A2-A17B-4D1D-A314-770757DBC77F"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15659D3B-13DB-447D-B680-3CBA8A153B10"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "206DDB27-676F-4373-A0CC-762C9F593E77"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDE66FCD-C9F5-4341-983A-BED55E80C3CF"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E32F32F-BEFA-41E2-B77E-576662A36A45"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73CC0102-E20D-479C-AF93-1DBCD0052B10"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA262B88-A7F0-4F27-A002-7CFFF097D95E"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6D23D07-42C3-49E6-B381-E4F8F7392ADA"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66941327-5BC4-4F22-920E-5A1E9A2A2234"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C01B6CFF-9602-4D81-BCB0-49F584B55AE7"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DC5025C-3FEC-4C14-B785-5B3B8E093BC0"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FB6E22F-B320-449C-97A2-EB8BFB54B73E"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C13D619A-70FA-4C77-8603-6EEA8F6193D1"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32059BF8-EF17-41C1-A0FC-39B41E775F3F"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.42:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6636E503-0532-4E10-881E-C3E929CE5B9C"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.43:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C2259D6-6B9F-4625-9E69-CD157748ABBF"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.44:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C9F265B-5685-445B-9EEB-546849AD9272"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.45:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18F7A611-76FC-4AE4-8D5A-F7E75270FDA8"
},
{
"criteria": "cpe:2.3:a:google:chrome:31.0.1650.46:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2AF9C17-46A4-46F4-9D22-217EDE0AFAF2"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}