Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2013:1840
HistoryDec 16, 2013 - 12:00 a.m.

(RHSA-2013:1840) Important: nss security update

2013-12-1600:00:00
access.redhat.com
16

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.091 Low

EPSS

Percentile

94.0%

JSON

Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications.

A flaw was found in the way NSS handled invalid handshake packets. A remote
attacker could use this flaw to cause a TLS/SSL client using NSS to crash
or, possibly, execute arbitrary code with the privileges of the user
running the application. (CVE-2013-5605)

All NSS users should upgrade to these updated packages, which contain a
backported patch to correct this issue. After installing this update,
applications using NSS must be restarted for the changes to take effect.

Related

prion 1
nessus 47
debiancve 1
altlinux 1
openvas 71
ubuntucve 1
debian 3
veracode 4
redhat 4
cve 1
fedora 31
suse 1
ubuntu 3
oraclelinux 3
mageia 1
securityvulns 1
mozilla 1
centos 2
amazon 2
gentoo 2
oracle 4
prion
prion
Code injection
2013-11-18 05:23:00
nessus
nessus
Fedora 19 : nss-3.15.3-1.fc19 / nss-softokn-3.15.3-1.fc19 / nss-util-3.15.3-1.fc19 (2013-23301)
2013-12-16 00:00:00
Thunderbird ESR < 17.0.11 Null_Cipher Code Execution (Mac OS X)
2013-11-22 00:00:00
Debian DSA-2800-1 : nss - buffer overflow
2013-11-26 00:00:00
debiancve
debiancve
CVE-2013-5605
2013-11-18 05:23:00
altlinux
altlinux
Security fix for the ALT Linux 6 package nss version 3.14.5-alt0.M60P.1
2013-11-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 2800-1 (nss - buffer overflow)
2013-11-25 00:00:00
Debian: Security Advisory (DSA-2800-1)
2013-11-24 00:00:00
Fedora Update for nss-util FEDORA-2013-23301
2013-12-17 00:00:00
ubuntucve
ubuntucve
CVE-2013-5605
2013-11-14 00:00:00
debian
debian
[SECURITY] [DSA 2800-1] nss security update
2013-11-25 20:05:41
[SECURITY] [DSA 2800-1] nss security update
2013-11-25 20:05:41
[BSA-091] Security Update for nss
2014-02-09 13:55:55
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:53:36
Denial Of Service (DoS)
2019-05-02 05:00:22
Denial Of Service (DoS)
2019-05-02 05:00:20
redhat
redhat
(RHSA-2013:1841) Important: nss security update
2013-12-16 00:00:00
(RHSA-2013:1791) Important: nss and nspr security, bug fix, and enhancement update
2013-12-05 00:00:00
(RHSA-2013:1829) Important: nss, nspr, and nss-util security update
2013-12-12 00:00:00
cve
cve
CVE-2013-5605
2013-11-18 05:23:00
fedora
fedora
[SECURITY] Fedora 20 Update: nss-util-3.15.3-1.fc20
2013-12-14 02:52:25
[SECURITY] Fedora 20 Update: nss-3.15.3.1-1.fc20
2013-12-22 05:41:01
[SECURITY] Fedora 20 Update: nss-3.15.3-2.fc20
2013-12-14 02:52:25
suse
suse
Security update for mozilla-nspr, mozilla-nss (important)
2013-12-02 20:04:14
ubuntu
ubuntu
Firefox vulnerabilities
2013-11-20 00:00:00
NSS vulnerabilities
2013-11-18 00:00:00
Thunderbird vulnerabilities
2013-11-21 00:00:00
oraclelinux
oraclelinux
nss, nss-util, and nss-softokn security, bug fix, and enhancement update
2014-12-02 00:00:00
nss, nspr, and nss-util security update
2013-12-12 00:00:00
nss and nspr security, bug fix, and enhancement update
2013-12-05 00:00:00
mageia
mageia
Updated firefox, rootcerts, nspr & nss packages fix security vulnerabilities
2013-11-21 00:54:49
securityvulns
securityvulns
Mozilla nss security vulnerabilities
2013-11-26 00:00:00
mozilla
mozilla
Miscellaneous Network Security Services (NSS) vulnerabilities — Mozilla
2013-11-15 00:00:00
centos
centos
nspr, nss security update
2013-12-13 00:04:31
nspr, nss security update
2013-12-05 17:45:58
amazon
amazon
Important: nss
2013-12-17 21:31:00
Important: nspr
2013-12-17 21:31:00
gentoo
gentoo
Mozilla Network Security Service: Multiple vulnerabilities
2014-06-21 00:00:00
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update - October 2014
2014-10-14 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.091 Low

EPSS

Percentile

94.0%

JSON
Related for RHSA-2013:1840
prion1nessus47debiancve1altlinux1openvas71ubuntucve1debian3veracode4redhat4cve1fedora31suse1ubuntu3oraclelinux3mageia1securityvulns1mozilla1centos2amazon2gentoo2oracle4