Red Hat Security AdvisoryRHSA-2017:1365
nss security and bug fix update
Released 2017-05-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nss-3.28.4-1.2.el7_3, nss-sysinit-3.28.4-1.2.el7_3, nss-tools-3.28.4-1.2.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.28.4-1.2.el7_3, nss-pkcs11-devel-3.28.4-1.2.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) nss-3.28.4-1.2.el7_3, nss-sysinit-3.28.4-1.2.el7_3, nss-tools-3.28.4-1.2.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.28.4-1.2.el7_3, nss-pkcs11-devel-3.28.4-1.2.el7_3
- Red Hat Enterprise Linux Server (v. 7) nss-3.28.4-1.2.el7_3, nss-3.28.4-1.2.el7_3.ppc, nss-devel-3.28.4-1.2.el7_3 +3
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.28.4-1.2.el7_3, nss-pkcs11-devel-3.28.4-1.2.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.28.4-1.2.el7_3, nss-devel-3.28.4-1.2.el7_3, nss-sysinit-3.28.4-1.2.el7_3 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.28.4-1.2.el7_3
Fixes 1 record
Priority MEDIUM 40
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04302 · Published 2017-05-30 · Partial fix CWE-476
