5281 matches found
CVE-2013-5605: Improper Input Validation
Mozilla Network Security Services NSS 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets...
CVE-2013-5606: Undefined Security Weakness
The CERTVerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services NSS 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access...
PT-2013-3370
Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions 3.15 through 3.15.2 Description The issue is related to an integer overflow that can be triggered by a large size value, potentially allowing remote attackers to cause a denial of service or have...
PT-2013-5675
Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions 3.14 before 3.14.5 Mozilla Network Security Services NSS versions 3.15 before 3.15.3 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other...
Miscellaneous Network Security Services (NSS) vulnerabilities — Mozilla
Mozilla has updated the version of Network Security Services NSS library used in Mozilla projects to NSS 3.15.3 with the exception of ESR17-based releases, which have been updated to NSS 3.14.5. This addresses several moderate to critical rated networking security issues...
CVE-2013-5605
Mozilla Network Security Services NSS 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets...
CVE-2013-1741
Integer overflow in Mozilla Network Security Services NSS 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value...
[SECURITY] Fedora 20 Update: mod_nss-1.0.8-24.fc20
The modnss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols using the Network Security Services NSS security library...
Fedora Update for mod_nss FEDORA-2013-19985
Check for the Version of modnss OpenVAS Vulnerability Test Fedora Update for modnss FEDORA-2013-19985 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Fedora Update for mod_nss FEDORA-2013-19976
Check for the Version of modnss OpenVAS Vulnerability Test Fedora Update for modnss FEDORA-2013-19976 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Mozilla Suite: Update to October 2013 release (important)
MozillaFirefox was updated to Firefox 25.0. MozillaThunderbird was updated to Thunderbird 24.1.0. Mozilla XULRunner was updated to 17.0.10esr. Mozilla NSPR was updated to 4.10.1. Changes in MozillaFirefox: requires NSS 3.15.2 or above MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592...
[SECURITY] Fedora 18 Update: mod_nss-1.0.8-24.fc18
The modnss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols using the Network Security Services NSS security library...
Debian DSA-2790-1 : nss - uninitialized memory read
A flaw was found in the way the Mozilla Network Security Service library nss read uninitialized data when there was a decryption failure. A remote attacker could use this flaw to cause a denial of service application crash for applications linked with the nss library. The oldstable distribution...
[SECURITY] [DSA 2790-1] nss security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2790-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 02, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2790-1 (nss - uninitialized memory read)
A flaw was found in the way the Mozilla Network Security Service library nss read uninitialized data when there was a decryption failure. A remote attacker could use this flaw to cause a denial of service application crash for applications linked with the nss library. The oldstable distribution...
Debian: Security Advisory (DSA-2790-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Firefox ESR < 17.0.10 Multiple Vulnerabilities
The installed version of Firefox ESR is earlier than 17.0.10, and is, therefore, potentially affected by the following vulnerabilities : - The implementation of Network Security Services NSS does not ensure that data structures are initialized, which could result in a denial of service or...
Mozilla Thunderbird ESR < 17.0.10 Multiple Vulnerabilities
The installed version of Thunderbird ESR is earlier than 17.0.10 and is, therefore, potentially affected the following vulnerabilities: - The implementation of Network Security Services NSS does not ensure that data structures are initialized, which could result in a denial of service or disclosu...
[ MDVSA-2013:257 ] nss
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:257 http://www.mandriva.com/en/support/security/ Package : nss Date : October 23, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and...