DSA-3872-1 nss - security update

Bulletin has no description...

Debian DLA-971-1 : nss security update

CVE-2017-7502 A NULL pointer dereference vulnerability in NSS was found when server receives empty SSLv2 messages. This issue was introduced with the recent removal of SSLv2 protocol from upstream code in 3.24.0 and introduction of dedicated parser able to handle just sslv2-style hello messages...

Debian Security Advisory DSA 3872-1 (nss - security update)

Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in denial of service or information disclosure. OpenVAS Vulnerability Test $Id: deb3872.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3872-1 using nvtgen 1.0 Script...

[SECURITY] [DLA 971-1] nss security update

Package : nss Version : 2:3.26-1+debu7u4 CVE ID : CVE-2017-7502 Debian Bug : 863839 CVE-2017-7502 A null pointer dereference vulnerability in NSS was found when server receives empty SSLv2 messages. This issue was introduced with the recent removal of SSLv2 protocol from upstream code in 3.24.0 a...

nss security update

CentOS Errata and Security Advisory CESA-2017:1365 An update for nss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

nss security update

CentOS Errata and Security Advisory CESA-2017:1364 An update for nss is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

DLA-971-1 nss - security update

Bulletin has no description...

RHEL 6 : nss (RHSA-2017:1364)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1364 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

Oracle Linux 7 : nss (ELSA-2017-1365)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1365 advisory. 3.28.4-1.2.0.1 - Added nss-vendor.patch to change vendor 3.28.4-1.2 - Include CKBI 2.14 and updated CA constraints from NSS 3.28.5 3.28.4-1.1 - Fix zero-length...

Scientific Linux Security Update : nss on SL7.x x86_64 (20170530)

Security Fixes : - A NULL pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library. CVE-2017-7502 Bug Fixes : - The Network Security Services NSS code and Certificate Authority CA...

Scientific Linux Security Update : nss on SL6.x i386/x86_64 (20170530)

Security Fixes : - A NULL pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library. CVE-2017-7502 Bug Fixes : - The Network Security Services NSS code and Certificate Authority CA...

Debian: Security Advisory (DSA-3872-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : nss (ELSA-2017-1364)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1364 advisory. 3.28.4-3.0.1 - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed 3.28.4-3 - Fix zero-length record...

OracleVM 3.3 / 3.4 : nss (OVMSA-2017-0109)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed - Fix zero-length record treatment for stream ciphers and SSLv2 - Include CKBI 2.14 and...

RHEL 7 : nss (RHSA-2017:1365)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1365 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

CVE-2017-7502

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker...

Null pointer dereference

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker...

CVE-2017-7502

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker...

CVE-2017-7502

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker...

CVE-2017-7502

CVE-2017-7502 is a NULL pointer dereference in Mozilla NSS when the server receives empty SSLv2 messages, enabling denial of service. Connected documents confirm NSS-related impact and multiple vendor advisories (IBM PowerKVM, IBM FlashSystem V840, IBM Security Directory Suite, Debian DSA-3872-1,...