Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nspr.Upgrade nss | Sep 20, 2017 | Jun 13, 2016 |
| Amazon_linux | — | Upgrade nss-utilUpgrade nssUpgrade nss-softokn | Dec 16, 2016 | Jun 13, 2016 |
| Centos_linux | — | Upgrade nss-util-develUpgrade nss-utilUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss | Jan 27, 2017 | Jun 13, 2016 |
| Debian | — | Upgrade nss | Oct 7, 2016 | Jun 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 1, 2016 |
| Freebsd | — | Upgrade linux-c7-nssUpgrade linux-seamonkeyUpgrade nssUpgrade linux-c6-nss | Dec 10, 2025 | Jun 7, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nss-util-develUpgrade nss-develUpgrade nss-sysinitUpgrade nssUpgrade nss-toolsUpgrade nss-util | Nov 30, 2017 | Jun 13, 2016 |
| Mfsa2016 61 | — | Upgrade to Mozilla Firefox version 47.0Upgrade to the latest version of Mozilla Firefox | Jun 8, 2016 | Jun 7, 2016 |
| Oracle_linux | — | Upgrade nss-develUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nss-utilUpgrade nss-toolsUpgrade nssUpgrade nss-sysinit | Nov 16, 2016 | Jun 13, 2016 |
| Redhat_linux | — | Upgrade nss-debuginfoUpgrade nss-develUpgrade nss-util-develUpgrade nss-toolsUpgrade nss-utilUpgrade nss-sysinitUpgrade nss-util-debuginfoUpgrade nssUpgrade nss-pkcs11-devel | Nov 16, 2016 | Jun 13, 2016 |
| Suse | — | Upgrade libsoftokn3Upgrade mozilla-nss-x86Upgrade firefox-fontconfigUpgrade java-1_8_0-openjdkUpgrade mozillafirefox-branding-sleUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-toolsUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translationsUpgrade libfreebl3-hmac-32bitUpgrade mozilla-nspr-develUpgrade MozillaFirefoxUpgrade java-1_8_0-openjdk-demoUpgrade mozilla-nspr-x86Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-sysinitUpgrade libfreebl3-32bitUpgrade libfreebl3-hmacUpgrade firefox-fontconfig-develUpgrade mozilla-nssUpgrade mozilla-nss-sysinit-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nsprUpgrade libsoftokn3-hmacUpgrade java-1_8_0-openjdk-headlessUpgrade MozillaFirefox-develUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3-x86Upgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade mozilla-nspr-32bitUpgrade libfreebl3Upgrade libsoftokn3-x86Upgrade mozilla-nss-certsUpgrade java-1_8_0-openjdk-devel | Jun 13, 2016 | Jun 13, 2016 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Jun 13, 2016 | Jun 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub