Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-utilUpgrade nss-toolsUpgrade nss-softoknUpgrade nss-sysinitUpgrade nss-develUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nssUpgrade nss-softokn-freebl-devel | Dec 1, 2016 | Sep 25, 2014 |
| Debian | — | Upgrade iceweaselUpgrade nssUpgrade icedove | Jul 30, 2024 | Sep 25, 2014 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade nssUpgrade linux-seamonkeyUpgrade linux-c6-nssUpgrade linux-firefox | Dec 10, 2025 | Sep 25, 2014 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr. | Oct 30, 2017 | Sep 25, 2014 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 30, 2014 | Sep 24, 2014 |
| Mfsa2014 73 | — | Upgrade to Mozilla Firefox ESR version 24.8.1Upgrade to Mozilla Firefox version 32.0.3Upgrade to Mozilla Firefox ESR version 31.1.1Upgrade to the latest version of Mozilla Firefox | Sep 26, 2014 | Sep 24, 2014 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.29.1 | Sep 26, 2014 | Sep 24, 2014 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 31.1.2Upgrade to Mozilla Thunderbird version 24.8.1Upgrade to the latest version of Mozilla Thunderbird | Sep 26, 2014 | Sep 24, 2014 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Sep 25, 2014 |
| Oracle_linux | — | Upgrade nss-softoknUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nss-pkcs11-develUpgrade nss-sysinitUpgrade nss-develUpgrade nss-util-develUpgrade nss-tools | Oct 16, 2024 | Sep 25, 2014 |
| Suse | — | Upgrade libfreebl3-hmacUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certsUpgrade libfreebl3-hmac-32bitUpgrade libsoftokn3-hmac-32bitUpgrade libsoftokn3-x86Upgrade mozilla-nss-32bitUpgrade libsoftokn3-hmacUpgrade MozillaFirefox-translationsUpgrade libfreebl3-32bitUpgrade libsoftokn3Upgrade libfreebl3-x86Upgrade libfreebl3Upgrade mozilla-nssUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nsprUpgrade mozillafirefox-branding-sleUpgrade mozilla-nss-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-develUpgrade MozillaFirefoxUpgrade mozilla-nss-sysinit | Dec 18, 2015 | Sep 25, 2014 |
| Ubuntu | — | Upgrade libnss3Upgrade thunderbirdUpgrade firefoxUpgrade libnss3-1d | Nov 8, 2024 | Sep 25, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub