CVE-2013-6627

Publication date 13 November 2013

Last updated 24 July 2024

Ubuntu priority

net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows remote web servers to cause a denial of service (out-of-bounds read) via a crafted response.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
chromium-browser	13.10 saucy	Fixed 31.0.1650.63-0ubuntu0.13.10.1~20131204.1
	13.04 raring	Fixed 31.0.1650.63-0ubuntu0.13.04.1~20131204.1
	12.10 quantal	Fixed 31.0.1650.63-0ubuntu0.12.10.1~20131204.1
	12.04 LTS precise	Fixed 31.0.1650.63-0ubuntu0.12.04.1~20131204.1
	10.04 LTS lucid	Ignored end of life

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://src.chromium.org/viewvc/chrome?revision=226539&view=revision
https://code.google.com/p/chromium/issues/detail?id=299892
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
https://www.cve.org/CVERecord?id=CVE-2013-6627