In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-nsprcentos-upgrade-nspr-debuginfocentos-upgrade-nspr-debugsourcecentos-upgrade-nspr-develcentos-upgrade-nsscentos-upgrade-nss-debuginfocentos-upgrade-nss-debugsourcecentos-upgrade-nss-develcentos-upgrade-nss-softokncentos-upgrade-nss-softokn-debuginfocentos-upgrade-nss-softokn-develcentos-upgrade-nss-softokn-freeblcentos-upgrade-nss-softokn-freebl-debuginfocentos-upgrade-nss-softokn-freebl-develcentos-upgrade-nss-sysinitcentos-upgrade-nss-sysinit-debuginfocentos-upgrade-nss-toolscentos-upgrade-nss-tools-debuginfocentos-upgrade-nss-utilcentos-upgrade-nss-util-debuginfocentos-upgrade-nss-util-devel | Aug 28, 2019 | Jul 30, 2019 |
| Debian | debian-upgrade-nss | Mar 12, 2019 | Mar 12, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-nss | Mar 17, 2020 | Mar 16, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-nsshuawei-euleros-2_0_sp2-upgrade-nss-develhuawei-euleros-2_0_sp2-upgrade-nss-sysinithuawei-euleros-2_0_sp2-upgrade-nss-tools | Sep 16, 2021 | Oct 22, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-nsshuawei-euleros-2_0_sp3-upgrade-nss-develhuawei-euleros-2_0_sp3-upgrade-nss-sysinithuawei-euleros-2_0_sp3-upgrade-nss-tools | Jan 20, 2021 | Oct 22, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-nsshuawei-euleros-2_0_sp5-upgrade-nss-develhuawei-euleros-2_0_sp5-upgrade-nss-sysinithuawei-euleros-2_0_sp5-upgrade-nss-tools | Feb 3, 2021 | Oct 22, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-security-nss-4-42-1-11-4-11-0-1-2-0 | Jul 17, 2019 | Jul 17, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-nsproracle-linux-upgrade-nspr-develoracle-linux-upgrade-nssoracle-linux-upgrade-nss-develoracle-linux-upgrade-nss-softoknoracle-linux-upgrade-nss-softokn-develoracle-linux-upgrade-nss-softokn-freebloracle-linux-upgrade-nss-softokn-freebl-develoracle-linux-upgrade-nss-sysinitoracle-linux-upgrade-nss-toolsoracle-linux-upgrade-nss-utiloracle-linux-upgrade-nss-util-devel | Jul 22, 2024 | Jan 22, 2019 |
| Redhat_linux | redhat-upgrade-nsprredhat-upgrade-nspr-debuginforedhat-upgrade-nspr-debugsourceredhat-upgrade-nspr-develredhat-upgrade-nssredhat-upgrade-nss-debuginforedhat-upgrade-nss-debugsourceredhat-upgrade-nss-develredhat-upgrade-nss-softoknredhat-upgrade-nss-softokn-debuginforedhat-upgrade-nss-softokn-develredhat-upgrade-nss-softokn-freeblredhat-upgrade-nss-softokn-freebl-debuginforedhat-upgrade-nss-softokn-freebl-develredhat-upgrade-nss-sysinitredhat-upgrade-nss-sysinit-debuginforedhat-upgrade-nss-toolsredhat-upgrade-nss-tools-debuginforedhat-upgrade-nss-utilredhat-upgrade-nss-util-debuginforedhat-upgrade-nss-util-devel | Jul 31, 2019 | Jul 30, 2019 | |
| Suse | — | suse-upgrade-libfreebl3suse-upgrade-libfreebl3-32bitsuse-upgrade-libfreebl3-hmacsuse-upgrade-libfreebl3-hmac-32bitsuse-upgrade-libsoftokn3suse-upgrade-libsoftokn3-32bitsuse-upgrade-libsoftokn3-hmacsuse-upgrade-libsoftokn3-hmac-32bitsuse-upgrade-mozilla-nsprsuse-upgrade-mozilla-nspr-32bitsuse-upgrade-mozilla-nspr-develsuse-upgrade-mozilla-nsssuse-upgrade-mozilla-nss-32bitsuse-upgrade-mozilla-nss-certssuse-upgrade-mozilla-nss-certs-32bitsuse-upgrade-mozilla-nss-develsuse-upgrade-mozilla-nss-sysinitsuse-upgrade-mozilla-nss-sysinit-32bitsuse-upgrade-mozilla-nss-tools | Jan 14, 2020 | Feb 27, 2019 |
| Ubuntu | ubuntu-upgrade-libnss3 | Mar 13, 2019 | Feb 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub