Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nss | Aug 30, 2017 | Oct 22, 2013 |
| Centos_linux | — | Upgrade nsprUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade nssUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-utilUpgrade nss-devel | Dec 1, 2016 | Oct 22, 2013 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Oct 22, 2013 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Oct 30, 2017 | Oct 22, 2013 |
| Mfsa2013 93 | — | Upgrade to Mozilla Firefox ESR version 24.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 25.0Upgrade to Mozilla Firefox ESR version 17.0.10 | Oct 30, 2013 | Oct 22, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22.0 | Dec 8, 2014 | Oct 22, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 24.1Upgrade to Mozilla Thunderbird ESR version 17.0.10Upgrade to the latest version of Mozilla Thunderbird | Oct 30, 2013 | Oct 22, 2013 |
| Oracle_linux | — | Upgrade nss-sysinitUpgrade nss-utilUpgrade nss-develUpgrade nss-toolsUpgrade nss-util-develUpgrade nsprUpgrade nss-pkcs11-develUpgrade nssUpgrade nspr-devel | Oct 16, 2024 | Oct 22, 2013 |
| Suse | — | Upgrade firefox-cairoUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade firefox-atkUpgrade firefox-pcre-32bitUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-nss-sysinitUpgrade libsoftokn3-32bitUpgrade mozilla-nssUpgrade mozilla-nspr-x86Upgrade firefox-libgcc_s1Upgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-develUpgrade firefox-glib2Upgrade libsoftokn3-x86Upgrade firefox-pangoUpgrade firefox-pcreUpgrade firefox-libstdc++6Upgrade firefox-fontconfigUpgrade firefox-pixman-32bitUpgrade firefox-pango-32bitUpgrade firefox-freetype2Upgrade mozilla-nspr-develUpgrade mozilla-nss-certsUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade mozilla-xulrunner191-translationsUpgrade firefox-gtk2-32bitUpgrade firefox-fontconfig-32bitUpgrade mozilla-nss-certs-32bitUpgrade firefox-gtk2Upgrade mozilla-nss-sysinit-32bitUpgrade sle-sdk-releaseUpgrade mozilla-xulrunner191Upgrade MozillaFirefoxUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nss-x86Upgrade mozilla-nsprUpgrade libfreebl3Upgrade firefox-gtk2-langUpgrade libfreebl3-x86Upgrade firefox-libgcc_s1-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-32bitUpgrade firefox-freetype2-32bitUpgrade firefox-libstdc++6-32bitUpgrade firefox-atk-32bitUpgrade firefox-glib2-32bitUpgrade mozilla-xulrunner191-translations-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade firefox-pixmanUpgrade libsoftokn3Upgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozilla-xulrunner191-32bitUpgrade firefox-cairo-32bit | Feb 17, 2015 | Oct 22, 2013 |
| Ubuntu | — | Upgrade libnss3Upgrade libnss3-1dUpgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub