Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade nss | Jun 23, 2017 | May 30, 2017 |
| Centos_linux | — | Upgrade nss-pkcs11-develUpgrade nss-debuginfoUpgrade nss-toolsUpgrade nss-sysinitUpgrade nssUpgrade nss-devel | Jun 2, 2017 | May 30, 2017 |
| Debian | — | Upgrade nss | May 31, 2017 | May 30, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nssUpgrade nss-sysinitUpgrade nss-develUpgrade nss-tools | Nov 30, 2017 | May 30, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nss-toolsUpgrade nss-sysinitUpgrade nssUpgrade nss-devel | Nov 30, 2017 | May 30, 2017 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-toolsUpgrade nssUpgrade nss-sysinit | May 31, 2017 | May 30, 2017 |
| Redhat_linux | — | Upgrade nss-pkcs11-develUpgrade nss-toolsUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nssUpgrade nss-develNo solution exists | May 31, 2017 | May 30, 2017 |
| Ubuntu | — | Upgrade libnss3 | Jun 21, 2017 | May 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub