The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-softokn-freeblUpgrade nss-utilUpgrade nspr-develUpgrade nss-softokn-develUpgrade nss-sysinitUpgrade nsprUpgrade nss-toolsUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nssUpgrade nss-softokn-freebl-develUpgrade nss-devel | Dec 1, 2016 | Apr 3, 2013 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Apr 3, 2013 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Apr 3, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Apr 3, 2013 |
| Mfsa2013 40 | — | Upgrade to Mozilla Firefox version 20.0Upgrade to Mozilla Firefox ESR version 17.0.5Upgrade to the latest version of Mozilla Firefox | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.17 | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 17.0.5Upgrade to Mozilla Thunderbird version 17.0.5Upgrade to the latest version of Mozilla Thunderbird | Apr 3, 2013 | Apr 2, 2013 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade nss-toolsUpgrade nsprUpgrade nss-softokn-develUpgrade nspr-develUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nssUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-freebl-devel | Oct 16, 2024 | Apr 3, 2013 |
| Suse | — | Upgrade mozillafirefox-branding-upstreamUpgrade mozilla-nspr-x86Upgrade seamonkey-debugsourceUpgrade mozilla-nss-certs-debuginfoUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade MozillaThunderbird-buildsymbolsUpgrade libfreebl3Upgrade seamonkey-translations-commonUpgrade libfreebl3-debuginfo-x86Upgrade libsoftokn3-debuginfo-32bitUpgrade seamonkey-venkmanUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nspr-debuginfo-x86Upgrade MozillaThunderbird-debuginfoUpgrade mozilla-js-debuginfo-x86Upgrade seamonkey-debuginfoUpgrade mozilla-nss-32bitUpgrade mozilla-jsUpgrade libsoftokn3-debuginfo-x86Upgrade mozilla-nspr-debuginfo-32bitUpgrade seamonkeyUpgrade libsoftokn3-debuginfoUpgrade libsoftokn3-x86Upgrade mozilla-nssUpgrade MozillaFirefox-branding-SLEDUpgrade xulrunner-x86Upgrade xulrunner-develUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-debuginfoUpgrade xulrunner-devel-debuginfoUpgrade mozilla-nss-certs-x86Upgrade mozilla-nspr-debuginfoUpgrade MozillaFirefoxUpgrade xulrunner-buildsymbolsUpgrade mozilla-nspr-32bitUpgrade mozilla-js-debuginfoUpgrade mozilla-nsprUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3-32bitUpgrade MozillaFirefox-debugsourceUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-64bitUpgrade libfreebl3-debuginfo-32bitUpgrade mozilla-nss-debuginfo-x86Upgrade seamonkey-dom-inspectorUpgrade mozilla-nss-64bitUpgrade mozilla-nspr-develUpgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade xulrunner-debuginfo-32bitUpgrade libfreebl3-x86Upgrade xulrunnerUpgrade mozilla-nss-develUpgrade mozilla-js-x86Upgrade enigmail-debuginfoUpgrade xulrunner-debuginfoUpgrade mozilla-nss-certsUpgrade mozilla-nss-sysinitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-js-32bitUpgrade mozilla-nss-debugsourceUpgrade mozilla-nss-certs-debuginfo-x86Upgrade seamonkey-ircUpgrade mozilla-nspr-debugsourceUpgrade MozillaThunderbird-develUpgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade MozillaThunderbirdUpgrade libsoftokn3Upgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-nss-tools-debuginfoUpgrade MozillaThunderbird-debugsourceUpgrade enigmailUpgrade MozillaFirefox-develUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-x86Upgrade sle-sdk-releaseUpgrade seamonkey-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-sysinit-x86Upgrade xulrunner-debugsourceUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade libfreebl3-debuginfoUpgrade MozillaThunderbird-devel-debuginfoUpgrade xulrunner-debuginfo-x86Upgrade mozilla-nss-debuginfoUpgrade xulrunner-32bitUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-nss-tools | Feb 17, 2015 | Apr 3, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Apr 3, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub