CVE-2017-5066 PUBLISHED

Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page.

EPSS 0.17% · 37.7th percentile

Risk Scores

EPSS Score
0.17%
37.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSoxide-qt0, 1.21.5-0ubuntu0.16.04.1, 1.20.4-0ubuntu0.16.04.1
Ubuntu:16.04:LTSchromium-browser53.0.2785.143-0ubuntu0.16.04.1.1257, 0, 45.0.2454.101-0ubuntu1.1201
Ubuntu:14.04:LTSchromium-browser36.0.1985.125-0ubuntu1.14.04.0~pkg1029, 34.0.1847.116-0ubuntu2, 33.0.1750.152-0ubuntu1~pkg995.1

Timeline

References

Open in Interactive Console →