Debian Security Bug TrackerDEBIANCVE:CVE-2014-1490CVE-2014-1490
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.013 Low
EPSS
Percentile
85.6%
Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | nss | <Β 2:3.15.4-1 | nss_2:3.15.4-1_all.deb |
| Debian | 11 | all | nss | <Β 2:3.15.4-1 | nss_2:3.15.4-1_all.deb |
| Debian | 10 | all | nss | <Β 2:3.15.4-1 | nss_2:3.15.4-1_all.deb |
| Debian | 999 | all | nss | <Β 2:3.15.4-1 | nss_2:3.15.4-1_all.deb |
| Debian | 13 | all | nss | <Β 2:3.15.4-1 | nss_2:3.15.4-1_all.deb |
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.013 Low
EPSS
Percentile
85.6%