Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nssUpgrade nspr. | Sep 20, 2017 | Jun 13, 2016 |
| Amazon_linux | — | Upgrade nssUpgrade nss-softoknUpgrade nss-util | Dec 16, 2016 | Jun 13, 2016 |
| Centos_linux | — | Upgrade nss-toolsUpgrade nss-sysinitUpgrade nssUpgrade nss-pkcs11-develUpgrade nss-utilUpgrade nss-util-develUpgrade nss-devel | Jan 27, 2017 | Jun 13, 2016 |
| Debian | — | Upgrade nss | Oct 7, 2016 | Jun 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 1, 2016 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-c7-nssUpgrade nssUpgrade linux-c6-nss | Dec 10, 2025 | Jun 7, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nss-sysinitUpgrade nss-utilUpgrade nss-toolsUpgrade nss-develUpgrade nssUpgrade nss-util-devel | Nov 30, 2017 | Jun 13, 2016 |
| Mfsa2016 61 | — | Upgrade to Mozilla Firefox version 47.0Upgrade to the latest version of Mozilla Firefox | Jun 8, 2016 | Jun 7, 2016 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade nss-utilUpgrade nss-util-develUpgrade nss-develUpgrade nss-toolsUpgrade nssUpgrade nss-sysinit | Nov 16, 2016 | Jun 13, 2016 |
| Redhat_linux | — | Upgrade nss-develUpgrade nss-utilUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade nss | Nov 16, 2016 | Jun 13, 2016 |
| Suse | — | Upgrade mozilla-nss-sysinit-32bitUpgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade libsoftokn3-hmacUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-nss-certs-32bitUpgrade java-1_8_0-openjdk-develUpgrade libfreebl3-x86Upgrade mozilla-nss-certsUpgrade libsoftokn3-x86Upgrade java-1_8_0-openjdk-headlessUpgrade mozilla-nss-32bitUpgrade firefox-fontconfig-develUpgrade MozillaFirefox-translations-otherUpgrade firefox-fontconfigUpgrade mozillafirefox-branding-sleUpgrade java-1_8_0-openjdkUpgrade mozilla-nss-sysinitUpgrade MozillaFirefoxUpgrade java-1_8_0-openjdk-demoUpgrade mozilla-nss-x86Upgrade MozillaFirefox-translationsUpgrade libfreebl3-32bitUpgrade libsoftokn3Upgrade MozillaFirefox-translations-commonUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-nss-toolsUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nspr-develUpgrade libfreebl3-hmacUpgrade libfreebl3-hmac-32bit | Jun 13, 2016 | Jun 13, 2016 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Jun 13, 2016 | Jun 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub