Lucene search
Arch LinuxASA-201511-3HistoryNov 06, 2015 - 12:00 a.m.
nss: arbitrary code execution
2015-11-0600:00:00
Arch Linux
lists.archlinux.org
25
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.073 Low
EPSS
Percentile
93.4%
Several issues existed within the ASN.1 decoder used by NSS for handling
streaming BER data. While the majority of NSS uses a separate,
unaffected DER decoder, several public routines also accept BER data,
and thus are affected. An attacker that successfully exploited these
issues can overflow the heap and may be able to obtain remote code
execution.
Related
osv
osv
nss - security update
2015-11-29 00:00:00
nss - security update
2016-05-18 00:00:00
nss - security update
2016-10-05 00:00:00
nessus
nessus
Debian DLA-354-1 : nss security update
2015-11-30 00:00:00
Ubuntu 14.04 LTS : NSS vulnerabilities (USN-2791-1)
2015-11-05 00:00:00
OracleVM 3.3 : nss / nss-util,nspr (OVMSA-2015-0145)
2015-11-06 00:00:00
ubuntu
ubuntu
NSS vulnerabilities
2015-11-04 00:00:00
Thunderbird vulnerabilities
2015-12-01 00:00:00
Firefox vulnerabilities
2015-11-04 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-354-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-2791-1)
2015-11-05 00:00:00
Slackware: Security Advisory (SSA:2015-310-02)
2022-04-21 00:00:00
debian
debian
[SECURITY] [DLA 354-1] nss security update
2015-11-29 16:36:27
[SECURITY] [DLA 480-1] nss security update
2016-05-18 18:34:37
[SECURITY] [DSA 3688-1] nss security update
2016-10-05 20:20:43
oraclelinux
oraclelinux
nss and nspr security update
2015-11-04 00:00:00
nss, nss-util, and nspr security update
2015-11-04 00:00:00
ibm
ibm
Security Bulletin: IBM Security Access Manager for Mobile is affected by Network Security Services (NSS) vulnerabilities (CVE-2015-7181, CVE-2015-7182, CVE-2015-7183)
2018-06-16 21:38:59
f5
f5
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:43:35
Arbitrary Code Execution
2019-05-02 05:43:34
Denial Of Service (DoS)
2019-01-15 09:08:13
redhat
redhat
(RHSA-2015:2068) Critical: nss, nss-util, and nspr security update
2015-11-18 00:00:00
(RHSA-2015:1981) Critical: nss, nss-util, and nspr security update
2015-11-04 00:00:00
(RHSA-2015:1980) Critical: nss and nspr security update
2015-11-04 00:00:00
slackware
slackware
[slackware-security] mozilla-nss
2015-11-06 17:08:58
centos
centos
nspr, nss security update
2015-11-04 15:57:04
nspr, nss security update
2015-11-04 11:34:51
amazon
amazon
Critical: nspr, nss-util, nss, jss
2015-11-05 01:58:00
mozilla
mozilla
NSS and NSPR memory corruption issues — Mozilla
2015-11-03 00:00:00
symantec
symantec
SA119 : Multiple NSS Vulnerabilities
2016-03-22 08:00:00
debiancve
debiancve
CVE-2015-7181
2015-11-05 05:59:00
CVE-2015-7182
2015-11-05 05:59:00
cve
cve
CVE-2015-7181
2015-11-05 05:59:00
CVE-2015-7182
2015-11-05 05:59:00
ubuntucve
ubuntucve
CVE-2015-7181
2015-11-04 00:00:00
CVE-2015-7182
2015-11-04 00:00:00
prion
prion
Design/Logic Flaw
2015-11-05 05:59:00
Heap overflow
2015-11-05 05:59:00
mageia
mageia
Updated firefox, nspr, nss packages fix security vulnerability
2015-11-04 21:03:05
chrome
chrome
Stable Channel Update
2015-10-13 00:00:00
suse
suse
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-12 20:10:40
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-06 17:11:17
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-12 17:11:49
archlinux
archlinux
firefox: multiple issues
2015-11-04 00:00:00
kaspersky
kaspersky
KLA10689 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2015-11-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-11-03 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00
Mozilla Products: Multiple vulnerabilities
2016-05-31 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.073 Low
EPSS
Percentile
93.4%
Related for ASA-201511-3