Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2016-5285

🗓️ 15 Nov 2019 15:44:05Reported by mozillaType 
cve
 cve🔗 web.nvd.nist.gov👁 167 Views

Null pointer dereference vulnerability in Mozilla Network Security Services, can cause Denial of Service

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Network Security Services (NSS) component affect SAN Volume Controller, Storwize family and FlashSystem V9000 products.
29 Mar 202301:48
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities
16 Jun 201822:03
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available
16 Jun 201821:59
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Security Access Manager appliances are affected by vulnerabilities in Network Security Services (NSS) (CVE-2016-2834, CVE-2016-5285, CVE-2016-8635)
16 Jun 201821:50
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Mozilla NSS affect the IBM FlashSystem model V840
18 Jun 201800:32
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Mozilla NSS affect the IBM FlashSystem models 840 and 900
18 Feb 202301:45
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities have been fixed in products bundled with IBM Security Directory Suite 8.0 and 8.0.1
16 Jun 201821:51
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Security Guardium is affected by Using Components with Known vulnerabilities (multiple CVEs)
16 Jun 201822:02
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Mozilla Network Security Services (NSS) affect IBM MQ Appliance (CVE-2016-2834, CVE-2016-5285, CVE-2016-8635)
15 Jun 201807:06
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Mozilla Network Security Services (NSS) affect PowerKVM
18 Jun 201801:34
–ibm
Rows per page
NVD
Vulners
Node
mozillanssRange<3.26
Node
OR
debiandebian_linuxMatch8.0
debiandebian_linuxMatch9.0
debiandebian_linuxMatch10.0
Node
OR
redhatenterprise_linuxMatch5.0
redhatenterprise_linuxMatch6.0
redhatenterprise_linuxMatch7.0
Node
suselinux_enterprise_serverMatch11sp2ltss
Node
OR
avayaaura_application_enablement_servicesRange6.1–6.3.3
avayaaura_application_enablement_servicesMatch7.0
avayaaura_application_server_5300Match3.0-
avayaaura_application_server_5300Match3.0sp1
avayaaura_application_server_5300Match3.0sp10
avayaaura_application_server_5300Match3.0sp10.1
avayaaura_application_server_5300Match3.0sp11
avayaaura_application_server_5300Match3.0sp11.1
avayaaura_application_server_5300Match3.0sp12
avayaaura_application_server_5300Match3.0sp12.1
avayaaura_application_server_5300Match3.0sp12.2
avayaaura_application_server_5300Match3.0sp12.3
avayaaura_application_server_5300Match3.0sp12.5
avayaaura_application_server_5300Match3.0sp3
avayaaura_application_server_5300Match3.0sp5
avayaaura_application_server_5300Match3.0sp7
avayaaura_communication_managerRange6.0–6.3.117.0
avayaaura_communication_managerMatch7.0-
avayaaura_communication_managerMatch7.0sp
avayaaura_communication_managerMatch7.0sp3
avayaaura_communication_manager_messagintMatch7.0-
avayaaura_communication_manager_messagintMatch7.0sp1
avayabreeze_platformRange3.0–3.2
avayacall_management_systemRange18.0.0.1–18.0.0.2
avayacall_management_systemMatch17.0-
avayacall_management_systemMatch17.0r3
avayacall_management_systemMatch17.0r4
avayacall_management_systemMatch17.0r5
avayacall_management_systemMatch17.0r6
avayaiqMatch5.2.x
Node
AND
avayacs1000e_firmwareRange7.0–7.6
avayacs1000eMatch-
Node
AND
avayacs1000m_firmwareRange7.0–7.6
avayacs1000mMatch-
Node
AND
avayacs1000e/cs1000m_signaling_server_firmwareRange7.0–7.6
avayacs1000e/cs1000m_signaling_serverMatch-
Node
OR
avayaaura_conferencingMatch7.0
avayaaura_conferencingMatch7.2
avayaaura_conferencingMatch8.0-
avayaaura_conferencingMatch8.0sp2
avayaaura_conferencingMatch8.0sp4
avayaaura_conferencingMatch8.0sp5
avayaaura_conferencingMatch8.0sp7
avayaaura_conferencingMatch8.0sp8
avayaaura_conferencingMatch8.0sp9
avayaaura_experience_portalRange6.0–7.1
Node
OR
avayaip_officeMatch8.1
avayaip_officeMatch9.1-
avayaip_officeMatch9.1sp1
avayaip_officeMatch9.1sp10
avayaip_officeMatch9.1sp11
avayaip_officeMatch9.1sp12
avayaip_officeMatch9.1sp3
avayaip_officeMatch9.1sp4
avayaip_officeMatch9.1sp5
avayaip_officeMatch9.1sp6
avayaip_officeMatch9.1sp7
avayaip_officeMatch9.1sp8
avayaip_officeMatch9.1sp9
avayaip_officeMatch10.0-
avayaip_officeMatch10.0sp1
avayaip_officeMatch10.0sp2
avayaip_officeMatch10.0sp3
avayaip_officeMatch10.0sp4
avayaip_officeMatch10.0sp5
avayaip_officeMatch10.0sp6
avayaip_officeMatch10.0sp7
Node
OR
avayaaura_messagingMatch6.3
avayaaura_messagingMatch6.3.3-
avayaaura_messagingMatch6.3.3sp4
avayaaura_messagingMatch6.3.3sp5
avayaaura_messagingMatch6.3.3sp6
avayaaura_session_managerRange6.3–6.3.18
avayaaura_session_managerMatch7.0-
avayaaura_session_managerMatch7.0sp1
avayaaura_session_managerMatch7.0sp2
avayaaura_session_managerMatch7.0.1-
avayaaura_session_managerMatch7.0.1sp1
avayaaura_session_managerMatch7.0.1sp2
avayaaura_system_managerRange6.3–6.3.18
avayaaura_system_managerRange7.0–7.0.1.3
avayaaura_utility_servicesRange6.3–6.3.14
avayaaura_utility_servicesRange7.0–7.0.1.2
avayameeting_exchangeMatch6.2-
avayameeting_exchangeMatch6.2sp3
avayamessage_networkingRange5.2–6.3
avayaone-x_client_enablement_servicesMatch6.2-
avayaone-x_client_enablement_servicesMatch6.2sp1
avayaone-x_client_enablement_servicesMatch6.2sp2
avayaone-x_client_enablement_servicesMatch6.2sp5
avayaproactive_contactRange5.0–5.1.2
Node
AND
OR
avayasession_border_controller_for_enterprise_firmwareRange6.2–6.3
avayasession_border_controller_for_enterprise_firmwareRange7.0–7.1
avayasession_border_controller_for_enterpriseMatch-
Node
AND
avayaaura_system_platform_firmwareRange6.3–6.4.0
avayaaura_system_platformMatch-
[
  {
    "product": "Network Security Services",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "3.24"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 00:49Current
7.2High risk
Vulners AI Score7.2
CVSS 25
CVSS 3.17.5
EPSS0.02279
CWE-476
cve-2016-5285null pointer dereferencemozilla network security servicesremote code executiondenial of servicenvd
167