Red Hat Security AdvisoryRHSA-2013:1829
nss, nspr, and nss-util security update
Released 2013-12-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) nspr-4.10.2-1.el6_5, nss-3.15.3-2.el6_5, nss-sysinit-3.15.3-2.el6_5 +2
- Red Hat Enterprise Linux Desktop Optional (v. 6) nspr-4.10.2-1.el6_5, nspr-devel-4.10.2-1.el6_5, nss-3.15.3-2.el6_5 +4
- Red Hat Enterprise Linux HPC Node (v. 6) nspr-4.10.2-1.el6_5, nss-3.15.3-2.el6_5, nss-sysinit-3.15.3-2.el6_5 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) nspr-4.10.2-1.el6_5, nspr-devel-4.10.2-1.el6_5, nss-3.15.3-2.el6_5 +4
- Red Hat Enterprise Linux Server (v. 6) nspr-4.10.2-1.el6_5, nspr-4.10.2-1.el6_5.ppc, nspr-devel-4.10.2-1.el6_5 +11
- Red Hat Enterprise Linux Server Optional (v. 6) nss-3.15.3-2.el6_5, nss-pkcs11-devel-3.15.3-2.el6_5, nss-pkcs11-devel-3.15.3-2.el6_5.ppc
- Red Hat Enterprise Linux Workstation (v. 6) nspr-4.10.2-1.el6_5, nspr-devel-4.10.2-1.el6_5, nss-3.15.3-2.el6_5 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) nss-3.15.3-2.el6_5, nss-pkcs11-devel-3.15.3-2.el6_5
Fixes 5 records
Priority MEDIUM 40
Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04435 · Published 2013-11-16 · Fixed CWE-20
Priority LOW 39
Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03893 · Published 2013-11-16 · Fixed CWE-189
Priority LOW 38
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03045 · Published 2013-11-20 · Fixed CWE-189
Priority LOW 31
The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog ar…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02397 · Published 2013-11-16 · Fixed CWE-264
Priority LOW 29
Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified o…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03406 · Published 2013-10-22 · Fixed
THREATIST.IORead the docs