Lucene search
HistoryNov 20, 2013 - 2:12 p.m.
CVE-2013-5607
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
10 High
AI Score
Confidence
High
0.101 Low
EPSS
Percentile
95.0%
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.
Affected configurations
Node
mozillanetscape_portable_runtimeRange≤4.10.1
ORmozillanetscape_portable_runtimeMatch4.1.1
ORmozillanetscape_portable_runtimeMatch4.1.2
ORmozillanetscape_portable_runtimeMatch4.2
ORmozillanetscape_portable_runtimeMatch4.2.2
ORmozillanetscape_portable_runtimeMatch4.3
ORmozillanetscape_portable_runtimeMatch4.4.1
ORmozillanetscape_portable_runtimeMatch4.5.1
ORmozillanetscape_portable_runtimeMatch4.6
ORmozillanetscape_portable_runtimeMatch4.6.1
ORmozillanetscape_portable_runtimeMatch4.6.2
ORmozillanetscape_portable_runtimeMatch4.6.3
ORmozillanetscape_portable_runtimeMatch4.6.4
ORmozillanetscape_portable_runtimeMatch4.6.5
ORmozillanetscape_portable_runtimeMatch4.6.6
ORmozillanetscape_portable_runtimeMatch4.6.7
ORmozillanetscape_portable_runtimeMatch4.6.8
ORmozillanetscape_portable_runtimeMatch4.7
ORmozillanetscape_portable_runtimeMatch4.7.1
ORmozillanetscape_portable_runtimeMatch4.7.2
ORmozillanetscape_portable_runtimeMatch4.7.3
ORmozillanetscape_portable_runtimeMatch4.7.4
ORmozillanetscape_portable_runtimeMatch4.7.5
ORmozillanetscape_portable_runtimeMatch4.7.6
ORmozillanetscape_portable_runtimeMatch4.8
ORmozillanetscape_portable_runtimeMatch4.8.2
ORmozillanetscape_portable_runtimeMatch4.8.3
ORmozillanetscape_portable_runtimeMatch4.8.4
ORmozillanetscape_portable_runtimeMatch4.8.5
ORmozillanetscape_portable_runtimeMatch4.8.6
ORmozillanetscape_portable_runtimeMatch4.8.7
ORmozillanetscape_portable_runtimeMatch4.8.8
ORmozillanetscape_portable_runtimeMatch4.8.9
ORmozillanetscape_portable_runtimeMatch4.9
ORmozillanetscape_portable_runtimeMatch4.9.1
ORmozillanetscape_portable_runtimeMatch4.9.2
ORmozillanetscape_portable_runtimeMatch4.9.3
ORmozillanetscape_portable_runtimeMatch4.9.4
ORmozillanetscape_portable_runtimeMatch4.9.5
ORmozillanetscape_portable_runtimeMatch4.9.6
ORmozillanetscape_portable_runtimeMatch4.10
Node
mozillaseamonkeyRange≤2.22
ORmozillaseamonkeyMatch2.0
ORmozillaseamonkeyMatch2.0alpha_1
ORmozillaseamonkeyMatch2.0alpha_2
ORmozillaseamonkeyMatch2.0alpha_3
ORmozillaseamonkeyMatch2.0beta_1
ORmozillaseamonkeyMatch2.0beta_2
ORmozillaseamonkeyMatch2.0rc1
ORmozillaseamonkeyMatch2.0rc2
ORmozillaseamonkeyMatch2.0.1
ORmozillaseamonkeyMatch2.0.2
ORmozillaseamonkeyMatch2.0.3
ORmozillaseamonkeyMatch2.0.4
ORmozillaseamonkeyMatch2.0.5
ORmozillaseamonkeyMatch2.0.6
ORmozillaseamonkeyMatch2.0.7
ORmozillaseamonkeyMatch2.0.8
ORmozillaseamonkeyMatch2.0.9
ORmozillaseamonkeyMatch2.0.10
ORmozillaseamonkeyMatch2.0.11
ORmozillaseamonkeyMatch2.0.12
ORmozillaseamonkeyMatch2.0.13
ORmozillaseamonkeyMatch2.0.14
ORmozillaseamonkeyMatch2.1
ORmozillaseamonkeyMatch2.1alpha1
ORmozillaseamonkeyMatch2.1alpha2
ORmozillaseamonkeyMatch2.1alpha3
ORmozillaseamonkeyMatch2.1beta1
ORmozillaseamonkeyMatch2.1beta2
ORmozillaseamonkeyMatch2.1beta3
ORmozillaseamonkeyMatch2.1rc1
ORmozillaseamonkeyMatch2.1rc2
ORmozillaseamonkeyMatch2.10
ORmozillaseamonkeyMatch2.10beta1
ORmozillaseamonkeyMatch2.10beta2
ORmozillaseamonkeyMatch2.10beta3
ORmozillaseamonkeyMatch2.10.1
ORmozillaseamonkeyMatch2.11
ORmozillaseamonkeyMatch2.11beta1
ORmozillaseamonkeyMatch2.11beta2
ORmozillaseamonkeyMatch2.11beta3
ORmozillaseamonkeyMatch2.11beta4
ORmozillaseamonkeyMatch2.11beta5
ORmozillaseamonkeyMatch2.11beta6
ORmozillaseamonkeyMatch2.12
ORmozillaseamonkeyMatch2.12beta1
ORmozillaseamonkeyMatch2.12beta2
ORmozillaseamonkeyMatch2.12beta3
ORmozillaseamonkeyMatch2.12beta4
ORmozillaseamonkeyMatch2.12beta5
ORmozillaseamonkeyMatch2.12beta6
ORmozillaseamonkeyMatch2.12.1
ORmozillaseamonkeyMatch2.13
ORmozillaseamonkeyMatch2.13beta1
ORmozillaseamonkeyMatch2.13beta2
ORmozillaseamonkeyMatch2.13beta3
ORmozillaseamonkeyMatch2.13beta4
ORmozillaseamonkeyMatch2.13beta5
ORmozillaseamonkeyMatch2.13beta6
ORmozillaseamonkeyMatch2.13.1
ORmozillaseamonkeyMatch2.13.2
ORmozillaseamonkeyMatch2.14
ORmozillaseamonkeyMatch2.14beta1
ORmozillaseamonkeyMatch2.14beta2
ORmozillaseamonkeyMatch2.14beta3
ORmozillaseamonkeyMatch2.14beta4
ORmozillaseamonkeyMatch2.14beta5
ORmozillaseamonkeyMatch2.15
ORmozillaseamonkeyMatch2.15beta1
ORmozillaseamonkeyMatch2.15beta2
ORmozillaseamonkeyMatch2.15beta3
ORmozillaseamonkeyMatch2.15beta4
ORmozillaseamonkeyMatch2.15beta5
ORmozillaseamonkeyMatch2.15beta6
ORmozillaseamonkeyMatch2.15.1
ORmozillaseamonkeyMatch2.15.2
ORmozillaseamonkeyMatch2.16
ORmozillaseamonkeyMatch2.16beta1
ORmozillaseamonkeyMatch2.16beta2
ORmozillaseamonkeyMatch2.16beta3
ORmozillaseamonkeyMatch2.16beta4
ORmozillaseamonkeyMatch2.16beta5
ORmozillaseamonkeyMatch2.16.1
ORmozillaseamonkeyMatch2.16.2
ORmozillaseamonkeyMatch2.17
ORmozillaseamonkeyMatch2.17beta1
ORmozillaseamonkeyMatch2.17beta2
ORmozillaseamonkeyMatch2.17beta3
ORmozillaseamonkeyMatch2.17beta4
ORmozillaseamonkeyMatch2.17.1
ORmozillaseamonkeyMatch2.18beta1
ORmozillaseamonkeyMatch2.18beta2
ORmozillaseamonkeyMatch2.18beta3
ORmozillaseamonkeyMatch2.18beta4
ORmozillaseamonkeyMatch2.19
ORmozillaseamonkeyMatch2.19beta1
ORmozillaseamonkeyMatch2.19beta2
ORmozillaseamonkeyMatch2.20
ORmozillaseamonkeyMatch2.20beta1
ORmozillaseamonkeyMatch2.20beta2
ORmozillaseamonkeyMatch2.20beta3
ORmozillaseamonkeyMatch2.21
ORmozillaseamonkeyMatch2.21beta1
ORmozillaseamonkeyMatch2.21beta2
ORmozillaseamonkeyMatch2.22beta1
ORmozillaseamonkeyMatch2.22beta2
Node
mozillafirefox_esrMatch17.0
ORmozillafirefox_esrMatch17.0.1
ORmozillafirefox_esrMatch17.0.2
ORmozillafirefox_esrMatch17.0.3
ORmozillafirefox_esrMatch17.0.4
ORmozillafirefox_esrMatch17.0.5
ORmozillafirefox_esrMatch17.0.6
ORmozillafirefox_esrMatch17.0.7
ORmozillafirefox_esrMatch17.0.8
ORmozillafirefox_esrMatch17.0.9
ORmozillafirefox_esrMatch17.0.10
ORmozillafirefox_esrMatch24.0
ORmozillafirefox_esrMatch24.0.1
ORmozillafirefox_esrMatch24.0.2
Node
mozillafirefoxRange≤25.0
ORmozillafirefoxMatch19.0
ORmozillafirefoxMatch19.0.1
ORmozillafirefoxMatch19.0.2
ORmozillafirefoxMatch20.0
ORmozillafirefoxMatch20.0.1
ORmozillafirefoxMatch21.0
ORmozillafirefoxMatch22.0
ORmozillafirefoxMatch23.0
ORmozillafirefoxMatch23.0.1
ORmozillafirefoxMatch24.0
References
kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html
lists.opensuse.org/opensuse-updates/2013-11/msg00080.html
rhn.redhat.com/errata/RHSA-2013-1791.html
rhn.redhat.com/errata/RHSA-2013-1829.html
security.gentoo.org/glsa/glsa-201406-19.xml
www.debian.org/security/2013/dsa-2820
www.mozilla.org/security/announce/2013/mfsa2013-103.html
www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
www.securityfocus.com/bid/63802
www.ubuntu.com/usn/USN-2031-1
www.ubuntu.com/usn/USN-2032-1
www.ubuntu.com/usn/USN-2087-1
bugzilla.mozilla.org/show_bug.cgi?id=927687
groups.google.com/forum/message/raw?msg=mozilla.dev.tech.nspr/_8AcygMEjSA/mm_cqQzLPFQJ
security.gentoo.org/glsa/201504-01
Related
prion
prion
Integer overflow
2013-11-20 14:12:00
Integer overflow
2013-11-18 05:23:00
cvelist
cvelist
CVE-2013-5607
2013-11-20 11:00:00
CVE-2013-1741
2013-11-16 15:00:00
cve
cve
CVE-2013-5607
2013-11-20 14:12:50
CVE-2013-1741
2013-11-18 05:23:57
ubuntucve
ubuntucve
CVE-2013-5607
2013-11-20 00:00:00
CVE-2013-1741
2013-11-14 00:00:00
debiancve
debiancve
CVE-2013-5607
2013-11-20 14:12:50
CVE-2013-1741
2013-11-18 05:23:57
openvas
openvas
Fedora Update for nspr FEDORA-2013-22756
2014-02-05 00:00:00
Fedora Update for nspr FEDORA-2013-22756
2014-02-05 00:00:00
Ubuntu: Security Advisory (USN-2032-1)
2013-11-26 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: nspr-4.10.2-1.fc20
2013-12-14 02:52:25
[SECURITY] Fedora 19 Update: nspr-4.10.2-1.fc19
2013-12-11 02:05:13
[SECURITY] Fedora 19 Update: nspr-4.10.6-1.fc19
2014-06-15 01:51:14
nessus
nessus
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-11-21 00:00:00
Firefox vulnerabilities
2013-11-20 00:00:00
NSPR vulnerability
2014-01-23 00:00:00
suse
suse
Security update for mozilla-nspr, mozilla-nss (important)
2013-12-02 20:04:14
debian
debian
[SECURITY] [DSA 2820-1] nspr security update
2013-12-17 07:14:58
[SECURITY] [DSA 2994-1] nss security update
2014-07-31 11:51:32
[DLA 23-1] nss security update
2014-07-31 11:23:33
ibm
ibm
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2013-12-05 00:00:00
nss, nspr, and nss-util security update
2013-12-12 00:00:00
nss, nss-util, and nss-softokn security, bug fix, and enhancement update
2014-12-02 00:00:00
mozilla
mozilla
Miscellaneous Network Security Services (NSS) vulnerabilities — Mozilla
2013-11-15 00:00:00
mageia
mageia
Updated firefox, rootcerts, nspr & nss packages fix security vulnerabilities
2013-11-21 00:54:49
securityvulns
securityvulns
Mozilla nss security vulnerabilities
2013-11-26 00:00:00
nvd
nvd
CVE-2013-1741
2013-11-18 05:23:57
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:00:20
Authentication Bypass
2019-05-02 05:00:22
Denial Of Service (DoS)
2019-05-02 05:00:22
amazon
amazon
Important: nspr
2013-12-17 21:31:00
Important: nss
2013-12-17 21:31:00
centos
centos
nspr, nss security update
2013-12-13 00:04:31
nspr, nss security update
2013-12-05 17:45:58
redhat
redhat
(RHSA-2013:1791) Important: nss and nspr security, bug fix, and enhancement update
2013-12-05 00:00:00
(RHSA-2013:1829) Important: nss, nspr, and nss-util security update
2013-12-12 00:00:00
(RHSA-2014:0041) Important: rhev-hypervisor6 security update
2014-01-21 00:00:00
gentoo
gentoo
Mozilla Network Security Service: Multiple vulnerabilities
2014-06-21 00:00:00
osv
osv
nss - security update
2014-07-31 00:00:00
nss - security update
2014-07-31 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
10 High
AI Score
Confidence
High
0.101 Low
EPSS
Percentile
95.0%
Related for NVD:CVE-2013-5607