Red Hat Security AdvisoryRHSA-2016:0684
nss and nspr security, bug fix, and enhancement update
Released 2016-04-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) nspr-4.11.0-1.el5_11, nspr-4.11.0-1.el5_11.i386, nspr-4.11.0-1.el5_11.ia64 +21
- Red Hat Enterprise Linux Desktop (v. 5 client) nspr-4.11.0-1.el5_11, nspr-4.11.0-1.el5_11.i386, nss-3.21.0-6.el5_11 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nspr-4.11.0-1.el5_11, nspr-devel-4.11.0-1.el5_11, nspr-devel-4.11.0-1.el5_11.i386 +5
Fixes 2 records
Priority MEDIUM 42
Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a d…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02171 · Published 2016-03-13 · Fixed
Priority LOW 37
Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of s…
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.02386 · Published 2016-03-13 · Fixed
