CVE-2017-15423

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

Date published : 2018-08-28

https://www.debian.org/security/2017/dsa-4064

https://security.gentoo.org/glsa/201801-03