Lucene search
UbuntuUSN-2030-1HistoryNov 18, 2013 - 12:00 a.m.
NSS vulnerabilities
2013-11-1800:00:00
ubuntu.com
30
7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.111 Low
EPSS
Percentile
95.1%
Releases
- Ubuntu 13.10
- Ubuntu 13.04
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 10.04
Packages
- nss - Network Security Service library
Details
Multiple security issues were discovered in NSS. If a user were tricked
into connecting to a malicious server, an attacker could possibly exploit
these to cause a denial of service via application crash, potentially
execute arbitrary code, or lead to information disclosure.
This update also adds TLS v1.2 support to Ubuntu 10.04 LTS, Ubuntu 12.04
LTS, Ubuntu 12.10, and Ubuntu 13.04.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.10 | noarch | libnss3 | < 2:3.15.3-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libnss3-1d | < 2:3.15.3-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libnss3-dbg | < 2:3.15.3-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libnss3-dev | < 2:3.15.3-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libnss3-tools | < 2:3.15.3-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libnss3 | < 2:3.15.3-0ubuntu0.13.04.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libnss3-1d | < 2:3.15.3-0ubuntu0.13.04.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libnss3-dbg | < 2:3.15.3-0ubuntu0.13.04.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libnss3-dev | < 2:3.15.3-0ubuntu0.13.04.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libnss3-tools | < 2:3.15.3-0ubuntu0.13.04.1 | UNKNOWN |
Related
openvas
openvas
Ubuntu: Security Advisory (USN-2030-1)
2013-11-21 00:00:00
Ubuntu Update for nss USN-2030-1
2013-11-21 00:00:00
Fedora Update for nss-util FEDORA-2013-23479
2013-12-23 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : nss vulnerabilities (USN-2030-1)
2013-11-19 00:00:00
OracleVM 3.3 : nss (OVMSA-2014-0014)
2014-11-26 00:00:00
OracleVM 3.3 : nss-util (OVMSA-2014-0015)
2014-11-26 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: nss-3.15.3.1-1.fc19
2014-01-05 12:35:19
[SECURITY] Fedora 19 Update: nss-softokn-3.15.3-1.fc19
2013-12-15 03:36:48
[SECURITY] Fedora 20 Update: nss-softokn-3.15.3-1.fc20
2013-12-14 02:52:25
oraclelinux
oraclelinux
nss, nspr, and nss-util security update
2013-12-12 00:00:00
nss and nspr security, bug fix, and enhancement update
2013-12-05 00:00:00
nss, nss-util, and nss-softokn security, bug fix, and enhancement update
2014-12-02 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:00:20
Authentication Bypass
2019-05-02 05:00:22
Denial Of Service (DoS)
2019-05-02 05:00:22
amazon
amazon
Important: nspr
2013-12-17 21:31:00
Important: nss
2013-12-17 21:31:00
redhat
redhat
(RHSA-2013:1791) Important: nss and nspr security, bug fix, and enhancement update
2013-12-05 00:00:00
(RHSA-2013:1829) Important: nss, nspr, and nss-util security update
2013-12-12 00:00:00
(RHSA-2014:0041) Important: rhev-hypervisor6 security update
2014-01-21 00:00:00
centos
centos
nspr, nss security update
2013-12-05 17:45:58
nspr, nss security update
2013-12-13 00:04:31
suse
suse
Security update for mozilla-nspr, mozilla-nss (important)
2013-12-02 20:04:14
gentoo
gentoo
Mozilla Network Security Service: Multiple vulnerabilities
2014-06-21 00:00:00
debian
debian
[BSA-091] Security Update for nss
2014-02-09 13:55:55
[SECURITY] [DSA 2994-1] nss security update
2014-07-31 11:51:32
[DLA 23-1] nss security update
2014-07-31 11:23:33
securityvulns
securityvulns
Mozilla nss security vulnerabilities
2013-11-26 00:00:00
Mozilla nss uninitialized memory dereference
2013-10-28 00:00:00
mageia
mageia
Updated firefox, rootcerts, nspr & nss packages fix security vulnerabilities
2013-11-21 00:54:49
mozilla
mozilla
Miscellaneous Network Security Services (NSS) vulnerabilities — Mozilla
2013-11-15 00:00:00
osv
osv
nss - security update
2014-07-31 00:00:00
nss - security update
2014-07-31 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2013-11-20 00:00:00
Thunderbird vulnerabilities
2013-11-21 00:00:00
ubuntucve
ubuntucve
CVE-2013-5606
2013-11-14 00:00:00
CVE-2013-5605
2013-11-14 00:00:00
cve
cve
CVE-2013-5606
2013-11-18 05:23:00
CVE-2013-5605
2013-11-18 05:23:00
debiancve
debiancve
CVE-2013-5606
2013-11-18 05:23:00
CVE-2013-5605
2013-11-18 05:23:00
prion
prion
Design/Logic Flaw
2013-11-18 05:23:00
Code injection
2013-11-18 05:23:00
Integer overflow
2013-11-18 05:23:00
altlinux
altlinux
Security fix for the ALT Linux 6 package nss version 3.14.5-alt0.M60P.1
2013-11-23 00:00:00
7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.111 Low
EPSS
Percentile
95.1%
Related for USN-2030-1