Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nss | Aug 30, 2017 | Nov 5, 2015 |
| Centos_linux | — | Upgrade nss-develUpgrade nss-utilUpgrade nssUpgrade nss-toolsUpgrade nsprUpgrade nss-sysinitUpgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nspr-devel | Dec 1, 2016 | Nov 5, 2015 |
| Debian | — | Upgrade iceweaselUpgrade icedoveUpgrade nss | Nov 9, 2015 | Nov 5, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 9, 2015 |
| Freebsd | — | Upgrade nsprUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade nssUpgrade linux-c6-nsprUpgrade firefoxUpgrade thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Nov 19, 2015 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Nov 5, 2015 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 28, 2026 | Oct 13, 2015 |
| Mfsa2015 133 | — | Upgrade to Mozilla Firefox version 42.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 38.4 | Nov 4, 2015 | Nov 3, 2015 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 38.4Upgrade to the latest version of Mozilla Thunderbird | Nov 30, 2015 | Nov 5, 2015 |
| Oracle Solaris | — | Upgrade developer/yasm to version 1.3.0-0.175.3.14.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade mail/thunderbird to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Nov 5, 2015 |
| Oracle_linux | — | Upgrade nssUpgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nsprUpgrade nspr-develUpgrade nss-toolsUpgrade nss-utilUpgrade nss-develUpgrade nss-sysinit | Oct 16, 2024 | Nov 5, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 3, 2015 |
| Suse | — | Upgrade mozilla-nss-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade mozilla-nsprUpgrade mozilla-nssUpgrade mozilla-nss-certsUpgrade libfreebl3-x86Upgrade MozillaThunderbird-develUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-32bitUpgrade mozilla-nss-x86Upgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3Upgrade mozilla-nspr-x86Upgrade libsoftokn3-hmacUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translationsUpgrade libfreebl3-hmac-32bitUpgrade mozillafirefox-branding-sleUpgrade MozillaThunderbird-translations-otherUpgrade libsoftokn3-x86Upgrade MozillaFirefoxUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3-hmacUpgrade libsoftokn3-32bitUpgrade MozillaThunderbirdUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-develUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-sysinitUpgrade libsoftokn3 | Dec 18, 2015 | Nov 5, 2015 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade libnss3 | Nov 9, 2015 | Nov 5, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub