vulnerability

Huawei EulerOS: CVE-2019-17006: nss security update

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Oct 22, 2020
Added
Jan 5, 2021
Modified
Apr 1, 2026

Description

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.

Solutions

huawei-euleros-2_0_sp9-upgrade-nsshuawei-euleros-2_0_sp9-upgrade-nss-softoknhuawei-euleros-2_0_sp9-upgrade-nss-util
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.