The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-softoknUpgrade nsprUpgrade nspr-develUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-util-develUpgrade nss-softokn-develUpgrade nss-utilUpgrade nssUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-devel | Dec 1, 2016 | Apr 3, 2013 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Apr 3, 2013 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Apr 3, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Apr 3, 2013 |
| Mfsa2013 40 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.5Upgrade to Mozilla Firefox version 20.0 | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.17Upgrade to the latest version of Mozilla SeaMonkey | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 17.0.5Upgrade to Mozilla Thunderbird version 17.0.5Upgrade to the latest version of Mozilla Thunderbird | Apr 3, 2013 | Apr 2, 2013 |
| Oracle_linux | — | Upgrade nss-develUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nssUpgrade nss-pkcs11-develUpgrade nsprUpgrade nss-sysinitUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-softoknUpgrade nss-util-develUpgrade nspr-develUpgrade nss-softokn-devel | Oct 16, 2024 | Apr 3, 2013 |
| Suse | — | Upgrade mozilla-nss-debugsourceUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-sysinitUpgrade xulrunner-debuginfo-32bitUpgrade libsoftokn3Upgrade mozilla-nss-certs-debuginfo-x86Upgrade MozillaThunderbird-develUpgrade xulrunner-debuginfo-x86Upgrade MozillaThunderbird-debugsourceUpgrade mozillafirefox-buildsymbolsUpgrade libfreebl3-debuginfoUpgrade mozilla-nss-toolsUpgrade mozilla-js-x86Upgrade xulrunnerUpgrade libfreebl3-x86Upgrade sle-sdk-releaseUpgrade mozilla-nss-develUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nss-certsUpgrade xulrunner-32bitUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-nss-sysinit-debuginfoUpgrade seamonkey-translations-otherUpgrade enigmail-debuginfoUpgrade xulrunner-debugsourceUpgrade mozilla-js-32bitUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade MozillaThunderbirdUpgrade mozilla-nss-tools-debuginfoUpgrade MozillaFirefox-develUpgrade mozilla-nss-x86Upgrade seamonkey-ircUpgrade mozilla-nss-sysinit-x86Upgrade mozilla-nss-debuginfoUpgrade mozilla-nss-certs-32bitUpgrade enigmailUpgrade xulrunner-debuginfoUpgrade MozillaThunderbird-devel-debuginfoUpgrade mozilla-nspr-debugsourceUpgrade mozilla-nss-certs-debuginfoUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade xulrunner-devel-debuginfoUpgrade MozillaFirefox-debugsourceUpgrade mozilla-js-debuginfo-x86Upgrade mozilla-nssUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nsprUpgrade seamonkey-debuginfoUpgrade mozilla-nss-32bitUpgrade seamonkeyUpgrade mozilla-nss-certs-x86Upgrade mozilla-nspr-32bitUpgrade xulrunner-develUpgrade mozilla-nss-64bitUpgrade xulrunner-buildsymbolsUpgrade MozillaFirefoxUpgrade mozilla-js-debuginfoUpgrade mozilla-jsUpgrade MozillaFirefox-translationsUpgrade libsoftokn3-debuginfo-x86Upgrade libfreebl3-32bitUpgrade libfreebl3Upgrade seamonkey-debugsourceUpgrade MozillaFirefox-debuginfoUpgrade mozilla-nspr-debuginfo-x86Upgrade libsoftokn3-debuginfoUpgrade mozilla-nspr-debuginfo-32bitUpgrade xulrunner-x86Upgrade mozilla-nss-debuginfo-x86Upgrade mozillafirefox-branding-upstreamUpgrade seamonkey-translations-commonUpgrade MozillaThunderbird-buildsymbolsUpgrade libfreebl3-debuginfo-x86Upgrade mozilla-nspr-x86Upgrade libsoftokn3-x86Upgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3-debuginfo-32bitUpgrade mozilla-nspr-64bitUpgrade seamonkey-venkmanUpgrade mozilla-nspr-develUpgrade MozillaFirefox-branding-SLEDUpgrade seamonkey-dom-inspectorUpgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nspr-debuginfoUpgrade MozillaThunderbird-debuginfo | Feb 17, 2015 | Apr 3, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Apr 3, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub