Red Hat Security AdvisoryRHSA-2016:0495
nss-util security update
Released 2016-03-23 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) nss-util-3.19.1-5.el7_1
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) nss-util-devel-3.19.1-5.el7_1
- Red Hat Enterprise Linux HPC Node EUS (v. 6.6) nss-util-3.19.1-3.el6_6
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) nss-util-devel-3.19.1-3.el6_6
- Red Hat Enterprise Linux Server AUS (v. 6.2) nss-util-3.13.1-10.el6_2, nss-util-devel-3.13.1-10.el6_2
- Red Hat Enterprise Linux Server AUS (v. 6.4) nss-util-3.14.3-8.el6_4, nss-util-devel-3.14.3-8.el6_4
- Red Hat Enterprise Linux Server AUS (v. 6.5) nss-util-3.16.1-4.el6_5, nss-util-devel-3.16.1-4.el6_5
- Red Hat Enterprise Linux Server EUS (v. 6.6) nss-util-3.19.1-3.el6_6, nss-util-3.19.1-3.el6_6.ppc, nss-util-devel-3.19.1-3.el6_6 +1
- Red Hat Enterprise Linux Server EUS (v. 7.1) nss-util-3.19.1-5.ael7b_1, nss-util-3.19.1-5.el7_1, nss-util-3.19.1-5.el7_1.ppc +3
Fixes 1 record
Priority MEDIUM 45
Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.04192 · Published 2016-03-13 · Fixed CWE-119