Rapid7

vulnerability

CentOS Linux: CVE-2017-7502: Important: nss security and bug fix update (Multiple Advisories)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
May 30, 2017
Added
Jun 2, 2017
Modified
May 25, 2023

Description

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.

Solutions

centos-upgrade-nsscentos-upgrade-nss-debuginfocentos-upgrade-nss-develcentos-upgrade-nss-pkcs11-develcentos-upgrade-nss-sysinitcentos-upgrade-nss-tools

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.