The cipherstring parsing code in nss_compat_ossl while in multi-keyword mode does not match the expected set of ciphers for a given cipher combination, which allows attackers to have unspecified impact via unknown vector…
CVSS 3.0CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.0151·Published 2017-07-25·Will not fixCWE-20
