The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nss | Aug 30, 2017 | Nov 5, 2015 |
| Centos_linux | — | Upgrade nss-pkcs11-develUpgrade nss-sysinitUpgrade nsprUpgrade nspr-develUpgrade nss-util-develUpgrade nss-toolsUpgrade nssUpgrade nss-develUpgrade nss-util | Dec 1, 2016 | Nov 5, 2015 |
| Debian | — | Upgrade iceweaselUpgrade icedoveUpgrade nss | Nov 9, 2015 | Nov 5, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 9, 2015 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade linux-firefoxUpgrade seamonkeyUpgrade libxulUpgrade nsprUpgrade firefox-esrUpgrade linux-thunderbirdUpgrade nssUpgrade linux-seamonkeyUpgrade linux-c6-nspr | Dec 10, 2025 | Nov 19, 2015 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nspr.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Nov 5, 2015 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 28, 2026 | Oct 13, 2015 |
| Mfsa2015 133 | — | Upgrade to Mozilla Firefox ESR version 38.4Upgrade to Mozilla Firefox version 42.0Upgrade to the latest version of Mozilla Firefox | Nov 4, 2015 | Nov 3, 2015 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 38.4 | Nov 30, 2015 | Nov 5, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade developer/yasm to version 1.3.0-0.175.3.14.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade mail/thunderbird to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Nov 5, 2015 |
| Oracle_linux | — | Upgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nssUpgrade nss-toolsUpgrade nspr-develUpgrade nsprUpgrade nss-sysinitUpgrade nss-develUpgrade nss-util | Oct 16, 2024 | Nov 5, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 3, 2015 |
| Suse | — | Upgrade mozilla-nss-sysinitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nspr-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translationsUpgrade libsoftokn3-32bitUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3-hmacUpgrade MozillaThunderbirdUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade mozillafirefox-branding-sleUpgrade libsoftokn3Upgrade MozillaThunderbird-translations-otherUpgrade libfreebl3-hmac-32bitUpgrade libsoftokn3-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade MozillaThunderbird-develUpgrade libfreebl3-32bitUpgrade libfreebl3Upgrade libsoftokn3-hmacUpgrade mozilla-nspr-x86Upgrade mozilla-nss-certsUpgrade mozilla-nssUpgrade mozilla-nss-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-devel | Dec 18, 2015 | Nov 5, 2015 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade libnss3 | Nov 9, 2015 | Nov 5, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub