A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade nss-softoknUpgrade nss-utilUpgrade nss | Dec 16, 2016 | Nov 16, 2016 |
| Centos_linux | — | Upgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nss-toolsUpgrade nss-utilUpgrade nssUpgrade nss-sysinitUpgrade nss-devel | Jan 27, 2017 | Nov 16, 2016 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Nov 15, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Oct 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nss-sysinitUpgrade nss-util-develUpgrade nssUpgrade nss-develUpgrade nss-utilUpgrade nss-tools | Nov 30, 2017 | Nov 16, 2016 |
| Oracle_linux | — | Upgrade nssUpgrade nss-utilUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-develUpgrade nss-pkcs11-devel | Nov 16, 2016 | Nov 16, 2016 |
| Redhat_linux | — | Upgrade nssUpgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-toolsUpgrade nss-util-debuginfoUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-util | Nov 16, 2016 | Nov 16, 2016 |
| Suse | — | Upgrade mozilla-nss-toolsUpgrade mozilla-nss-x86Upgrade libfreebl3-32bitUpgrade libfreebl3-hmacUpgrade MozillaFirefoxUpgrade mozilla-nss-certsUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3-hmac-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-develUpgrade libsoftokn3-hmacUpgrade MozillaFirefox-translationsUpgrade libsoftokn3-x86Upgrade mozilla-nss-32bitUpgrade libfreebl3Upgrade libsoftokn3-32bitUpgrade mozilla-nssUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3-x86Upgrade libsoftokn3Upgrade mozilla-nss-sysinitUpgrade MozillaFirefox-devel | Dec 5, 2016 | Nov 16, 2016 |
| Ubuntu | — | Upgrade libnss3 | Jan 5, 2017 | Nov 16, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub