The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 3.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nss | Aug 30, 2017 | Mar 25, 2014 |
| Centos_linux | — | Upgrade nss-pkcs11-develUpgrade nss-utilUpgrade nss-develUpgrade nssUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nspr-develUpgrade nsprUpgrade nss-sysinit | Dec 1, 2016 | Mar 25, 2014 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Mar 25, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 17, 2015 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade firefox-esrUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Apr 29, 2014 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade dev-libs/nspr.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Mar 25, 2014 |
| Mfsa2014 45 | — | Upgrade to Mozilla Firefox version 29.0Upgrade to the latest version of Mozilla Firefox | Apr 30, 2014 | Mar 25, 2014 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.26.0 | Dec 8, 2014 | Mar 25, 2014 |
| Oracle_linux | — | Upgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade nsprUpgrade nss-softoknUpgrade nss-develUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nss-softokn-develUpgrade nss-sysinitUpgrade nss-util-develUpgrade nssUpgrade nss-tools | Oct 16, 2024 | Mar 25, 2014 |
| Suse | — | Upgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-sysinitUpgrade mozilla-nsprUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade libsoftokn3-x86Upgrade libfreebl3-hmacUpgrade MozillaFirefox-develUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translationsUpgrade libsoftokn3-hmacUpgrade mozilla-nss-certsUpgrade libfreebl3-hmac-32bitUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3-x86Upgrade libsoftokn3Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nssUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-develUpgrade libfreebl3-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nss-x86Upgrade libfreebl3 | Dec 18, 2015 | Mar 25, 2014 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3Upgrade libnss3-1d | Nov 8, 2024 | Mar 25, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub