Read the docs
TI-2013-01534 Aliases CVE-2013-1740GHSA-26rr-whcg-5f4g

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security…

Priority LOW 29CWE-310Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Why it matters now

EPSS 0.01664 76th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 47

CPEVersionsRoleVendor
cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*up to 3.15.3VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.2:*:*:*:*:*:*:*3.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.3:*:*:*:*:*:*:*3.3VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.4:*:*:*:*:*:*:*3.4VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.4.1:*:*:*:*:*:*:*3.4.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.4.2:*:*:*:*:*:*:*3.4.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.5:*:*:*:*:*:*:*3.5VulnerableMozilla
  • cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:* Versions up to 3.15.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Mozilla
Show 37 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mozilla:network_security_services:3.6:*:*:*:*:*:*:*3.6VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.6.1:*:*:*:*:*:*:*3.6.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7:*:*:*:*:*:*:*3.7VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.1:*:*:*:*:*:*:*3.7.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.2:*:*:*:*:*:*:*3.7.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.3:*:*:*:*:*:*:*3.7.3VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.5:*:*:*:*:*:*:*3.7.5VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.7:*:*:*:*:*:*:*3.7.7VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.8:*:*:*:*:*:*:*3.8VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.9:*:*:*:*:*:*:*3.9VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.11.2:*:*:*:*:*:*:*3.11.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.11.3:*:*:*:*:*:*:*3.11.3VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.11.4:*:*:*:*:*:*:*3.11.4VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.11.5:*:*:*:*:*:*:*3.11.5VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12:*:*:*:*:*:*:*3.12VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.1:*:*:*:*:*:*:*3.12.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.2:*:*:*:*:*:*:*3.12.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.3:*:*:*:*:*:*:*3.12.3VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.3.1:*:*:*:*:*:*:*3.12.3.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.3.2:*:*:*:*:*:*:*3.12.3.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.4:*:*:*:*:*:*:*3.12.4VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.5:*:*:*:*:*:*:*3.12.5VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.6:*:*:*:*:*:*:*3.12.6VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.7:*:*:*:*:*:*:*3.12.7VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.8:*:*:*:*:*:*:*3.12.8VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.9:*:*:*:*:*:*:*3.12.9VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.10:*:*:*:*:*:*:*3.12.10VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.12.11:*:*:*:*:*:*:*3.12.11VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.14:*:*:*:*:*:*:*3.14VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.14.1:*:*:*:*:*:*:*3.14.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.14.2:*:*:*:*:*:*:*3.14.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.14.3:*:*:*:*:*:*:*3.14.3VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.14.4:*:*:*:*:*:*:*3.14.4VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.14.5:*:*:*:*:*:*:*3.14.5VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.15:*:*:*:*:*:*:*3.15VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.15.1:*:*:*:*:*:*:*3.15.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.15.2:*:*:*:*:*:*:*3.15.2VulnerableMozilla
  • cpe:2.3:a:mozilla:network_security_services:3.6:*:*:*:*:*:*:* Versions 3.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.6.1:*:*:*:*:*:*:* Versions 3.6.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7:*:*:*:*:*:*:* Versions 3.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.1:*:*:*:*:*:*:* Versions 3.7.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.2:*:*:*:*:*:*:* Versions 3.7.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.3:*:*:*:*:*:*:* Versions 3.7.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.5:*:*:*:*:*:*:* Versions 3.7.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.7:*:*:*:*:*:*:* Versions 3.7.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.8:*:*:*:*:*:*:* Versions 3.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.9:*:*:*:*:*:*:* Versions 3.9 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.11.2:*:*:*:*:*:*:* Versions 3.11.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.11.3:*:*:*:*:*:*:* Versions 3.11.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.11.4:*:*:*:*:*:*:* Versions 3.11.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.11.5:*:*:*:*:*:*:* Versions 3.11.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.1:*:*:*:*:*:*:* Versions 3.12.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.2:*:*:*:*:*:*:* Versions 3.12.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.3:*:*:*:*:*:*:* Versions 3.12.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.3.1:*:*:*:*:*:*:* Versions 3.12.3.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.3.2:*:*:*:*:*:*:* Versions 3.12.3.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.4:*:*:*:*:*:*:* Versions 3.12.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.5:*:*:*:*:*:*:* Versions 3.12.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.6:*:*:*:*:*:*:* Versions 3.12.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.7:*:*:*:*:*:*:* Versions 3.12.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.8:*:*:*:*:*:*:* Versions 3.12.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.9:*:*:*:*:*:*:* Versions 3.12.9 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.10:*:*:*:*:*:*:* Versions 3.12.10 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.12.11:*:*:*:*:*:*:* Versions 3.12.11 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.14:*:*:*:*:*:*:* Versions 3.14 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.14.1:*:*:*:*:*:*:* Versions 3.14.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.14.2:*:*:*:*:*:*:* Versions 3.14.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.14.3:*:*:*:*:*:*:* Versions 3.14.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.14.4:*:*:*:*:*:*:* Versions 3.14.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.14.5:*:*:*:*:*:*:* Versions 3.14.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.15:*:*:*:*:*:*:* Versions 3.15 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.15.1:*:*:*:*:*:*:* Versions 3.15.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.15.2:*:*:*:*:*:*:* Versions 3.15.2 Vulnerable ·Mozilla

Remediation

Red Hat 2 advisories

  • RHSA-2014:1246 Released 2014-09-16 · Red Hat rating Moderate
    nss and nspr security, bug fix, and enhancement update
    • Red Hat Enterprise Linux (v. 5 server) nss-3.16.1-2.el5, nss-3.16.1-2.el5.i386, nss-3.16.1-2.el5.ia64 +13
    • Red Hat Enterprise Linux Desktop (v. 5 client) nss-3.16.1-2.el5, nss-3.16.1-2.el5.i386, nss-tools-3.16.1-2.el5 +1
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nss-3.16.1-2.el5, nss-devel-3.16.1-2.el5, nss-devel-3.16.1-2.el5.i386 +2
  • RHSA-2014:0917 Released 2014-07-22 · Red Hat rating Critical
    nss and nspr security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Desktop (v. 6) nspr-4.10.6-1.el6_5, nss-3.16.1-4.el6_5, nss-sysinit-3.16.1-4.el6_5 +2
    • Red Hat Enterprise Linux Desktop Optional (v. 6) nspr-4.10.6-1.el6_5, nspr-devel-4.10.6-1.el6_5, nss-3.16.1-4.el6_5 +4
    • Red Hat Enterprise Linux HPC Node (v. 6) nspr-4.10.6-1.el6_5, nss-3.16.1-4.el6_5, nss-sysinit-3.16.1-4.el6_5 +2
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) nspr-4.10.6-1.el6_5, nspr-devel-4.10.6-1.el6_5, nss-3.16.1-4.el6_5 +4
    • Red Hat Enterprise Linux Server (v. 6) nspr-4.10.6-1.el6_5, nspr-4.10.6-1.el6_5.ppc, nspr-devel-4.10.6-1.el6_5 +11
    • Red Hat Enterprise Linux Server Optional (v. 6) nss-3.16.1-4.el6_5, nss-pkcs11-devel-3.16.1-4.el6_5, nss-pkcs11-devel-3.16.1-4.el6_5.ppc
    • Red Hat Enterprise Linux Workstation (v. 6) nspr-4.10.6-1.el6_5, nspr-devel-4.10.6-1.el6_5, nss-3.16.1-4.el6_5 +5
    • Red Hat Enterprise Linux Workstation Optional (v. 6) nss-3.16.1-4.el6_5, nss-pkcs11-devel-3.16.1-4.el6_5

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2014:1246
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2014:1246
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2014:0917
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2014:0917
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2014:1246
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2014:0917
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2014:0917
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2014:0917
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2014:0917
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2014:0917
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2014:0917
Not affected: 1 product
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1740
  2. 2026-10-03 Alias added: GHSA-26rr-whcg-5f4g

References

Exploit 1

Advisory 3

Other 10

  • TI-2015-03381 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server… CVSS 3.1LOW 3.7
  • TI-2007-00009 Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services… CVSS 2.0MEDIUM 6.8
  • TI-2018-08903 A cached side channel attack during handshakes using RSA encryption could allow for the… CVSS 3.0MEDIUM 5.9
  • TI-2015-05957 Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services… CVSS 3.0CRITICAL 9.8
  • TI-2004-00763 Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows… CVSS 2.0HIGH 7.5
  • TI-2014-01197 Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in… CVSS 2.0HIGH 10.0
See all 49 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences