CVE-2019-17006

🗓️ 26 Dec 2019 06:08:47Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 34 Views

A vulnerability in nss causes heap-buffer overflow resulting in crash and data lea

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: Vulnerability in nss and nspr CVE-2019-17006.	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities	12 Jan 202110:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	29 Apr 202502:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-17006, CVE-2019-17023, CVE-2020-12403)	8 Jul 202117:59	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerabilitiy has been fixed in IBM Security Identity Manager Virtual Appliance(CVE-2019-17006)	20 May 202118:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple nss and nspr vulnerabilities	21 Jan 202109:32	–	ibm
Tenable Nessus	Amazon Linux 2 : nspr, nss-softokn, nss-util, nss (ALAS-2020-1559)	11 Nov 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : nspr, nss-softokn, nss-util (ALAS-2021-1522)	13 Jul 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0015: nss (ALINUX3-SA-2021:0015)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : nss and nspr (CESA-2020:3280)	1 Feb 202100:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-17006
developer	www.developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

19 Apr 2024 21:59Current

3Low risk

Vulners AI Score3

CVSS 3.19.8

CVSS 210

CVSS 38.1

EPSS0.03552

vulnerability nss heap-buffer overflow crash data leak confidentiality integrity system availability