A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade nssUpgrade nss-softoknUpgrade nss-util | Dec 16, 2016 | Nov 16, 2016 |
| Centos_linux | — | Upgrade nss-develUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-utilUpgrade nssUpgrade nss-pkcs11-devel | Jan 27, 2017 | Nov 16, 2016 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Nov 15, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Oct 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nss-util-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nssUpgrade nss-utilUpgrade nss-devel | Nov 30, 2017 | Nov 16, 2016 |
| Oracle_linux | — | Upgrade nss-util-develUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nssUpgrade nss-sysinitUpgrade nss-utilUpgrade nss-tools | Nov 16, 2016 | Nov 16, 2016 |
| Redhat_linux | — | Upgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-util-debuginfoUpgrade nssUpgrade nss-toolsUpgrade nss-utilUpgrade nss-develUpgrade nss-util-develUpgrade nss-pkcs11-devel | Nov 16, 2016 | Nov 16, 2016 |
| Suse | — | Upgrade mozilla-nssUpgrade libsoftokn3Upgrade libsoftokn3-32bitUpgrade libfreebl3-x86Upgrade libfreebl3Upgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-sysinitUpgrade MozillaFirefox-develUpgrade libfreebl3-hmacUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade libsoftokn3-hmacUpgrade MozillaFirefoxUpgrade libsoftokn3-x86Upgrade mozilla-nss-certsUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade libfreebl3-hmac-32bit | Dec 5, 2016 | Nov 16, 2016 |
| Ubuntu | — | Upgrade libnss3 | Jan 5, 2017 | Nov 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub