PT-2014-2487

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions prior to 3.15.4 Description The issue allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic when the TLS False Start...

Debian DSA-2800-1 : nss - buffer overflow

Andrew Tinits reported a potentially exploitable buffer overflow in the Mozilla Network Security Service library nss. With a specially crafted request a remote attacker could cause a denial of service or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian Security Advisory DSA 2800-1 (nss - buffer overflow)

Andrew Tinits reported a potentially exploitable buffer overflow in the Mozilla Network Security Service library nss. With a specially crafted request a remote attacker could cause a denial of service or possibly execute arbitrary code. OpenVAS Vulnerability Test $Id: deb2800.nasl 6611 2017-07-07...

DSA-2800-1 nss - buffer overflow

Bulletin has no description...

CVE-2013-5605

Mozilla Network Security Services NSS 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets...

CVE-2013-1741

Integer overflow in Mozilla Network Security Services NSS 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value...

CVE-2013-5605

Mozilla Network Security Services NSS 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets...

Integer overflow

Integer overflow in Mozilla Network Security Services NSS 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value...

CVE-2013-5605

Mozilla Network Security Services NSS 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets...

CVE-2013-1741

Integer overflow in Mozilla Network Security Services NSS 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value...

CVE-2013-5606

Technical details (affected product/component/versions, root cause or exploit information) are not provided in the connected documents for CVE-2013-5606. Monitor for updates.

CVE-2013-5606

The CERTVerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services NSS 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access...

CVE-2013-1741: Undefined Security Weakness

Integer overflow in Mozilla Network Security Services NSS 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value...

CVE-2013-5605: Improper Input Validation

Mozilla Network Security Services NSS 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets...

CVE-2013-5606: Undefined Security Weakness

The CERTVerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services NSS 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access...

PT-2013-3370

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions 3.15 through 3.15.2 Description The issue is related to an integer overflow that can be triggered by a large size value, potentially allowing remote attackers to cause a denial of service or have...

PT-2013-5676

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions 3.15 through 3.15.2 Description The issue is related to the CERT VerifyCert function in lib/certhigh/certvfy.c, which provides an unexpected return value for an incompatible key-usage certificate...

PT-2013-5675

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions 3.14 before 3.14.5 Mozilla Network Security Services NSS versions 3.15 before 3.15.3 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other...

CVE-2013-5606

The CERTVerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services NSS 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access...

MGASA-2013-0320 Updated firefox & related packages fix multiple security vulnerabilities

Updated firefox packages fix security vulnerabilities: Mozilla Network Security Services NSS before 3.15.2 does not ensure that data structures are initialized before read operations, which allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...