CVE:CVE-2017-15423
CNNVD:CNNVD-201808-882
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。BoringSSL是一个使用在Google产品中实现加密和TLS功能的OpenSSL分支库。
Google Chrome 63.0.3239.84之前版本中的BoringSSL的SPAKE2实现存在安全漏洞。远程攻击者可通过检查协议流量利用该漏洞泄露密码。
solution:Upgrade google chrome to a higher version than 63.0.3239.84,and avoid the version (,63.0.3239.84); Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0