Description
Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Google Chrome
unspecified to < 72.0.3626.81affected
References
- http://www.securityfocus.com/bid/106767 ↗
- https://access.redhat.com/errata/RHSA-2019:0309 ↗
- https://www.debian.org/security/2019/dsa-4395 ↗
- https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html ↗
- https://crbug.com/914497 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/ ↗