Read the docs
TI-2016-04582 Aliases CVE-2016-5285GHSA-5p92-qfvf-9h9q

NULL pointer dereference in Mozilla Network Security Services

Priority LOW 37CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

Why it matters now

EPSS 0.02279 83rd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MozillaNetwork Security Services3.24—No fix listedCNA
  • Network Security Services VendorMozilla Affected 3.24 Fixed in — No fix listed CNA

CPE configurations NVD · 101

CPEVersionsRoleVendor
cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*before 3.26VulnerableMozilla
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*11 sp2VulnerableSUSE
cpe:2.3:a:avaya:aura_application_enablement_services:*:*:*:*:*:*:*:*6.1 – 6.3.3VulnerableAvaya
cpe:2.3:a:avaya:aura_application_enablement_services:7.0:*:*:*:*:*:*:*7.0VulnerableAvaya
  • cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:* Versions before 3.26 Vulnerable ·Mozilla
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:* Versions 11 sp2 Vulnerable ·SUSE
  • cpe:2.3:a:avaya:aura_application_enablement_services:*:*:*:*:*:*:*:* Versions 6.1 – 6.3.3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_enablement_services:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Avaya
Show 91 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:avaya:aura_application_server_5300:3.0:-:*:*:*:*:*:*3.0VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp1:*:*:*:*:*:*3.0 sp1VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp10:*:*:*:*:*:*3.0 sp10VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp10.1:*:*:*:*:*:*3.0 sp10.1VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp11:*:*:*:*:*:*3.0 sp11VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp11.1:*:*:*:*:*:*3.0 sp11.1VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12:*:*:*:*:*:*3.0 sp12VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.1:*:*:*:*:*:*3.0 sp12.1VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.2:*:*:*:*:*:*3.0 sp12.2VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.3:*:*:*:*:*:*3.0 sp12.3VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.5:*:*:*:*:*:*3.0 sp12.5VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp3:*:*:*:*:*:*3.0 sp3VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp5:*:*:*:*:*:*3.0 sp5VulnerableAvaya
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp7:*:*:*:*:*:*3.0 sp7VulnerableAvaya
cpe:2.3:a:avaya:aura_communication_manager:*:*:*:*:*:*:*:*6.0 – 6.3.117.0VulnerableAvaya
cpe:2.3:a:avaya:aura_communication_manager:7.0:-:*:*:*:*:*:*7.0VulnerableAvaya
cpe:2.3:a:avaya:aura_communication_manager:7.0:sp:*:*:*:*:*:*7.0 spVulnerableAvaya
cpe:2.3:a:avaya:aura_communication_manager:7.0:sp3:*:*:*:*:*:*7.0 sp3VulnerableAvaya
cpe:2.3:a:avaya:aura_communication_manager_messagint:7.0:-:*:*:*:*:*:*7.0VulnerableAvaya
cpe:2.3:a:avaya:aura_communication_manager_messagint:7.0:sp1:*:*:*:*:*:*7.0 sp1VulnerableAvaya
cpe:2.3:a:avaya:breeze_platform:*:*:*:*:*:*:*:*3.0 – 3.2VulnerableAvaya
cpe:2.3:a:avaya:call_management_system:*:*:*:*:*:*:*:*18.0.0.1 – 18.0.0.2VulnerableAvaya
cpe:2.3:a:avaya:call_management_system:17.0:-:*:*:*:*:*:*17.0VulnerableAvaya
cpe:2.3:a:avaya:call_management_system:17.0:r3:*:*:*:*:*:*17.0 r3VulnerableAvaya
cpe:2.3:a:avaya:call_management_system:17.0:r4:*:*:*:*:*:*17.0 r4VulnerableAvaya
cpe:2.3:a:avaya:call_management_system:17.0:r5:*:*:*:*:*:*17.0 r5VulnerableAvaya
cpe:2.3:a:avaya:call_management_system:17.0:r6:*:*:*:*:*:*17.0 r6VulnerableAvaya
cpe:2.3:a:avaya:iq:5.2.x:*:*:*:*:*:*:*5.2.xVulnerableAvaya
cpe:2.3:o:avaya:cs1000e_firmware:*:*:*:*:*:*:*:*7.0 – 7.6VulnerableAvaya
cpe:2.3:h:avaya:cs1000e:-:*:*:*:*:*:*:*not specified by NVDRunning onAvaya
cpe:2.3:o:avaya:cs1000m_firmware:*:*:*:*:*:*:*:*7.0 – 7.6VulnerableAvaya
cpe:2.3:h:avaya:cs1000m:-:*:*:*:*:*:*:*not specified by NVDRunning onAvaya
cpe:2.3:o:avaya:cs1000e\/cs1000m_signaling_server_firmware:*:*:*:*:*:*:*:*7.0 – 7.6VulnerableAvaya
cpe:2.3:h:avaya:cs1000e\/cs1000m_signaling_server:-:*:*:*:*:*:*:*not specified by NVDRunning onAvaya
cpe:2.3:a:avaya:aura_conferencing:7.0:*:*:*:*:*:*:*7.0VulnerableAvaya
cpe:2.3:a:avaya:aura_conferencing:7.2:*:*:*:*:*:*:*7.2VulnerableAvaya
cpe:2.3:a:avaya:aura_conferencing:8.0:-:*:*:*:*:*:*8.0VulnerableAvaya
cpe:2.3:a:avaya:aura_conferencing:8.0:sp2:*:*:*:*:*:*8.0 sp2VulnerableAvaya
cpe:2.3:a:avaya:aura_conferencing:8.0:sp4:*:*:*:*:*:*8.0 sp4VulnerableAvaya
cpe:2.3:a:avaya:aura_conferencing:8.0:sp5:*:*:*:*:*:*8.0 sp5VulnerableAvaya
cpe:2.3:a:avaya:aura_conferencing:8.0:sp7:*:*:*:*:*:*8.0 sp7VulnerableAvaya
cpe:2.3:a:avaya:aura_conferencing:8.0:sp8:*:*:*:*:*:*8.0 sp8VulnerableAvaya
cpe:2.3:a:avaya:aura_conferencing:8.0:sp9:*:*:*:*:*:*8.0 sp9VulnerableAvaya
cpe:2.3:a:avaya:aura_experience_portal:*:*:*:*:*:*:*:*6.0 – 7.1VulnerableAvaya
cpe:2.3:a:avaya:ip_office:8.1:*:*:*:*:*:*:*8.1VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:-:*:*:*:*:*:*9.1VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp1:*:*:*:*:*:*9.1 sp1VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp10:*:*:*:*:*:*9.1 sp10VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp11:*:*:*:*:*:*9.1 sp11VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp12:*:*:*:*:*:*9.1 sp12VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp3:*:*:*:*:*:*9.1 sp3VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp4:*:*:*:*:*:*9.1 sp4VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp5:*:*:*:*:*:*9.1 sp5VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp6:*:*:*:*:*:*9.1 sp6VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp7:*:*:*:*:*:*9.1 sp7VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp8:*:*:*:*:*:*9.1 sp8VulnerableAvaya
cpe:2.3:a:avaya:ip_office:9.1:sp9:*:*:*:*:*:*9.1 sp9VulnerableAvaya
cpe:2.3:a:avaya:ip_office:10.0:-:*:*:*:*:*:*10.0VulnerableAvaya
cpe:2.3:a:avaya:ip_office:10.0:sp1:*:*:*:*:*:*10.0 sp1VulnerableAvaya
cpe:2.3:a:avaya:ip_office:10.0:sp2:*:*:*:*:*:*10.0 sp2VulnerableAvaya
cpe:2.3:a:avaya:ip_office:10.0:sp3:*:*:*:*:*:*10.0 sp3VulnerableAvaya
cpe:2.3:a:avaya:ip_office:10.0:sp4:*:*:*:*:*:*10.0 sp4VulnerableAvaya
cpe:2.3:a:avaya:ip_office:10.0:sp5:*:*:*:*:*:*10.0 sp5VulnerableAvaya
cpe:2.3:a:avaya:ip_office:10.0:sp6:*:*:*:*:*:*10.0 sp6VulnerableAvaya
cpe:2.3:a:avaya:ip_office:10.0:sp7:*:*:*:*:*:*10.0 sp7VulnerableAvaya
cpe:2.3:a:avaya:aura_messaging:6.3:*:*:*:*:*:*:*6.3VulnerableAvaya
cpe:2.3:a:avaya:aura_messaging:6.3.3:-:*:*:*:*:*:*6.3.3VulnerableAvaya
cpe:2.3:a:avaya:aura_messaging:6.3.3:sp4:*:*:*:*:*:*6.3.3 sp4VulnerableAvaya
cpe:2.3:a:avaya:aura_messaging:6.3.3:sp5:*:*:*:*:*:*6.3.3 sp5VulnerableAvaya
cpe:2.3:a:avaya:aura_messaging:6.3.3:sp6:*:*:*:*:*:*6.3.3 sp6VulnerableAvaya
cpe:2.3:a:avaya:aura_session_manager:*:*:*:*:*:*:*:*6.3 – 6.3.18VulnerableAvaya
cpe:2.3:a:avaya:aura_session_manager:7.0:-:*:*:*:*:*:*7.0VulnerableAvaya
cpe:2.3:a:avaya:aura_session_manager:7.0:sp1:*:*:*:*:*:*7.0 sp1VulnerableAvaya
cpe:2.3:a:avaya:aura_session_manager:7.0:sp2:*:*:*:*:*:*7.0 sp2VulnerableAvaya
cpe:2.3:a:avaya:aura_session_manager:7.0.1:-:*:*:*:*:*:*7.0.1VulnerableAvaya
cpe:2.3:a:avaya:aura_session_manager:7.0.1:sp1:*:*:*:*:*:*7.0.1 sp1VulnerableAvaya
cpe:2.3:a:avaya:aura_session_manager:7.0.1:sp2:*:*:*:*:*:*7.0.1 sp2VulnerableAvaya
cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:*6.3 – 6.3.18; 7.0 – 7.0.1.3VulnerableAvaya
cpe:2.3:a:avaya:aura_utility_services:*:*:*:*:*:*:*:*6.3 – 6.3.14; 7.0 – 7.0.1.2VulnerableAvaya
cpe:2.3:a:avaya:meeting_exchange:6.2:-:*:*:*:*:*:*6.2VulnerableAvaya
cpe:2.3:a:avaya:meeting_exchange:6.2:sp3:*:*:*:*:*:*6.2 sp3VulnerableAvaya
cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*5.2 – 6.3VulnerableAvaya
cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:-:*:*:*:*:*:*6.2VulnerableAvaya
cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp1:*:*:*:*:*:*6.2 sp1VulnerableAvaya
cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp2:*:*:*:*:*:*6.2 sp2VulnerableAvaya
cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp5:*:*:*:*:*:*6.2 sp5VulnerableAvaya
cpe:2.3:a:avaya:proactive_contact:*:*:*:*:*:*:*:*5.0 – 5.1.2VulnerableAvaya
cpe:2.3:o:avaya:session_border_controller_for_enterprise_firmware:*:*:*:*:*:*:*:*6.2 – 6.3; 7.0 – 7.1VulnerableAvaya
cpe:2.3:h:avaya:session_border_controller_for_enterprise:-:*:*:*:*:*:*:*not specified by NVDRunning onAvaya
cpe:2.3:o:avaya:aura_system_platform_firmware:*:*:*:*:*:*:*:*6.3 – 6.4.0VulnerableAvaya
cpe:2.3:h:avaya:aura_system_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onAvaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:-:*:*:*:*:*:* Versions 3.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp1:*:*:*:*:*:* Versions 3.0 sp1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp10:*:*:*:*:*:* Versions 3.0 sp10 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp10.1:*:*:*:*:*:* Versions 3.0 sp10.1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp11:*:*:*:*:*:* Versions 3.0 sp11 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp11.1:*:*:*:*:*:* Versions 3.0 sp11.1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12:*:*:*:*:*:* Versions 3.0 sp12 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.1:*:*:*:*:*:* Versions 3.0 sp12.1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.2:*:*:*:*:*:* Versions 3.0 sp12.2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.3:*:*:*:*:*:* Versions 3.0 sp12.3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.5:*:*:*:*:*:* Versions 3.0 sp12.5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp3:*:*:*:*:*:* Versions 3.0 sp3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp5:*:*:*:*:*:* Versions 3.0 sp5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp7:*:*:*:*:*:* Versions 3.0 sp7 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_communication_manager:*:*:*:*:*:*:*:* Versions 6.0 – 6.3.117.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_communication_manager:7.0:-:*:*:*:*:*:* Versions 7.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_communication_manager:7.0:sp:*:*:*:*:*:* Versions 7.0 sp Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_communication_manager:7.0:sp3:*:*:*:*:*:* Versions 7.0 sp3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_communication_manager_messagint:7.0:-:*:*:*:*:*:* Versions 7.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_communication_manager_messagint:7.0:sp1:*:*:*:*:*:* Versions 7.0 sp1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:breeze_platform:*:*:*:*:*:*:*:* Versions 3.0 – 3.2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:call_management_system:*:*:*:*:*:*:*:* Versions 18.0.0.1 – 18.0.0.2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:call_management_system:17.0:-:*:*:*:*:*:* Versions 17.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:call_management_system:17.0:r3:*:*:*:*:*:* Versions 17.0 r3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:call_management_system:17.0:r4:*:*:*:*:*:* Versions 17.0 r4 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:call_management_system:17.0:r5:*:*:*:*:*:* Versions 17.0 r5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:call_management_system:17.0:r6:*:*:*:*:*:* Versions 17.0 r6 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:iq:5.2.x:*:*:*:*:*:*:* Versions 5.2.x Vulnerable ·Avaya
  • cpe:2.3:o:avaya:cs1000e_firmware:*:*:*:*:*:*:*:* Versions 7.0 – 7.6 Vulnerable ·Avaya
  • cpe:2.3:h:avaya:cs1000e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Avaya
  • cpe:2.3:o:avaya:cs1000m_firmware:*:*:*:*:*:*:*:* Versions 7.0 – 7.6 Vulnerable ·Avaya
  • cpe:2.3:h:avaya:cs1000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Avaya
  • cpe:2.3:o:avaya:cs1000e\/cs1000m_signaling_server_firmware:*:*:*:*:*:*:*:* Versions 7.0 – 7.6 Vulnerable ·Avaya
  • cpe:2.3:h:avaya:cs1000e\/cs1000m_signaling_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:8.0:-:*:*:*:*:*:* Versions 8.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:8.0:sp2:*:*:*:*:*:* Versions 8.0 sp2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:8.0:sp4:*:*:*:*:*:* Versions 8.0 sp4 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:8.0:sp5:*:*:*:*:*:* Versions 8.0 sp5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:8.0:sp7:*:*:*:*:*:* Versions 8.0 sp7 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:8.0:sp8:*:*:*:*:*:* Versions 8.0 sp8 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_conferencing:8.0:sp9:*:*:*:*:*:* Versions 8.0 sp9 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_experience_portal:*:*:*:*:*:*:*:* Versions 6.0 – 7.1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:-:*:*:*:*:*:* Versions 9.1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp1:*:*:*:*:*:* Versions 9.1 sp1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp10:*:*:*:*:*:* Versions 9.1 sp10 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp11:*:*:*:*:*:* Versions 9.1 sp11 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp12:*:*:*:*:*:* Versions 9.1 sp12 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp3:*:*:*:*:*:* Versions 9.1 sp3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp4:*:*:*:*:*:* Versions 9.1 sp4 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp5:*:*:*:*:*:* Versions 9.1 sp5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp6:*:*:*:*:*:* Versions 9.1 sp6 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp7:*:*:*:*:*:* Versions 9.1 sp7 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp8:*:*:*:*:*:* Versions 9.1 sp8 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:9.1:sp9:*:*:*:*:*:* Versions 9.1 sp9 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:10.0:-:*:*:*:*:*:* Versions 10.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:10.0:sp1:*:*:*:*:*:* Versions 10.0 sp1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:10.0:sp2:*:*:*:*:*:* Versions 10.0 sp2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:10.0:sp3:*:*:*:*:*:* Versions 10.0 sp3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:10.0:sp4:*:*:*:*:*:* Versions 10.0 sp4 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:10.0:sp5:*:*:*:*:*:* Versions 10.0 sp5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:10.0:sp6:*:*:*:*:*:* Versions 10.0 sp6 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:ip_office:10.0:sp7:*:*:*:*:*:* Versions 10.0 sp7 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_messaging:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_messaging:6.3.3:-:*:*:*:*:*:* Versions 6.3.3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_messaging:6.3.3:sp4:*:*:*:*:*:* Versions 6.3.3 sp4 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_messaging:6.3.3:sp5:*:*:*:*:*:* Versions 6.3.3 sp5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_messaging:6.3.3:sp6:*:*:*:*:*:* Versions 6.3.3 sp6 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_session_manager:*:*:*:*:*:*:*:* Versions 6.3 – 6.3.18 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_session_manager:7.0:-:*:*:*:*:*:* Versions 7.0 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_session_manager:7.0:sp1:*:*:*:*:*:* Versions 7.0 sp1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_session_manager:7.0:sp2:*:*:*:*:*:* Versions 7.0 sp2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_session_manager:7.0.1:-:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_session_manager:7.0.1:sp1:*:*:*:*:*:* Versions 7.0.1 sp1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_session_manager:7.0.1:sp2:*:*:*:*:*:* Versions 7.0.1 sp2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:* Versions 6.3 – 6.3.18; 7.0 – 7.0.1.3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:aura_utility_services:*:*:*:*:*:*:*:* Versions 6.3 – 6.3.14; 7.0 – 7.0.1.2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:meeting_exchange:6.2:-:*:*:*:*:*:* Versions 6.2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:meeting_exchange:6.2:sp3:*:*:*:*:*:* Versions 6.2 sp3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:* Versions 5.2 – 6.3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:-:*:*:*:*:*:* Versions 6.2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp1:*:*:*:*:*:* Versions 6.2 sp1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp2:*:*:*:*:*:* Versions 6.2 sp2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp5:*:*:*:*:*:* Versions 6.2 sp5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:proactive_contact:*:*:*:*:*:*:*:* Versions 5.0 – 5.1.2 Vulnerable ·Avaya
  • cpe:2.3:o:avaya:session_border_controller_for_enterprise_firmware:*:*:*:*:*:*:*:* Versions 6.2 – 6.3; 7.0 – 7.1 Vulnerable ·Avaya
  • cpe:2.3:h:avaya:session_border_controller_for_enterprise:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Avaya
  • cpe:2.3:o:avaya:aura_system_platform_firmware:*:*:*:*:*:*:*:* Versions 6.3 – 6.4.0 Vulnerable ·Avaya
  • cpe:2.3:h:avaya:aura_system_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Avaya

Remediation

Red Hat 1 advisory

  • RHSA-2016:2779 Released 2016-11-16 · Red Hat rating Moderate
    nss and nss-util security update
    • Red Hat Enterprise Linux (v. 5 server) nss-3.21.3-2.el5_11, nss-3.21.3-2.el5_11.i386, nss-3.21.3-2.el5_11.ia64 +13
    • Red Hat Enterprise Linux Client (v. 7) nss-3.21.3-2.el7_3, nss-sysinit-3.21.3-2.el7_3, nss-tools-3.21.3-2.el7_3 +1
    • Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.21.3-2.el7_3, nss-pkcs11-devel-3.21.3-2.el7_3, nss-util-devel-3.21.3-1.1.el7_3
    • Red Hat Enterprise Linux ComputeNode (v. 7) nss-3.21.3-2.el7_3, nss-sysinit-3.21.3-2.el7_3, nss-tools-3.21.3-2.el7_3 +1
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.21.3-2.el7_3, nss-pkcs11-devel-3.21.3-2.el7_3, nss-util-devel-3.21.3-1.1.el7_3
    • Red Hat Enterprise Linux Desktop (v. 5 client) nss-3.21.3-2.el5_11, nss-3.21.3-2.el5_11.i386, nss-tools-3.21.3-2.el5_11 +1
    • Red Hat Enterprise Linux Desktop (v. 6) nss-3.21.3-2.el6_8, nss-sysinit-3.21.3-2.el6_8, nss-tools-3.21.3-2.el6_8 +1
    • Red Hat Enterprise Linux Desktop Optional (v. 6) nss-devel-3.21.3-2.el6_8, nss-pkcs11-devel-3.21.3-2.el6_8, nss-util-devel-3.21.3-1.el6_8
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nss-3.21.3-2.el5_11, nss-devel-3.21.3-2.el5_11, nss-devel-3.21.3-2.el5_11.i386 +2
    • Red Hat Enterprise Linux HPC Node (v. 6) nss-3.21.3-2.el6_8, nss-sysinit-3.21.3-2.el6_8, nss-tools-3.21.3-2.el6_8 +1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) nss-devel-3.21.3-2.el6_8, nss-pkcs11-devel-3.21.3-2.el6_8, nss-util-devel-3.21.3-1.el6_8
    • Red Hat Enterprise Linux Server (v. 6) nss-3.21.3-2.el6_8, nss-3.21.3-2.el6_8.ppc, nss-devel-3.21.3-2.el6_8 +7
    • Red Hat Enterprise Linux Server (v. 7) nss-3.21.3-2.el7_3, nss-3.21.3-2.el7_3.ppc, nss-devel-3.21.3-2.el7_3 +7
    • Red Hat Enterprise Linux Server Optional (v. 6) nss-pkcs11-devel-3.21.3-2.el6_8, nss-pkcs11-devel-3.21.3-2.el6_8.ppc
    • Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.21.3-2.el7_3, nss-pkcs11-devel-3.21.3-2.el7_3.ppc
    • Red Hat Enterprise Linux Workstation (v. 6) nss-3.21.3-2.el6_8, nss-devel-3.21.3-2.el6_8, nss-sysinit-3.21.3-2.el6_8 +3
    • Red Hat Enterprise Linux Workstation (v. 7) nss-3.21.3-2.el7_3, nss-devel-3.21.3-2.el7_3, nss-sysinit-3.21.3-2.el7_3 +3
    • Red Hat Enterprise Linux Workstation Optional (v. 6) nss-pkcs11-devel-3.21.3-2.el6_8
    • Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.21.3-2.el7_3

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2016:2779
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2016:2779
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2016:2779
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2016:2779
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2016:2779
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2016:2779

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-5285
  2. 2026-10-03 Alias added: GHSA-5p92-qfvf-9h9q

References

Advisory 1

Other 7

  • TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
  • TI-2021-19417 Out-of-bounds write in Mozilla NSS CVSS 3.1CRITICAL 9.8
  • TI-2020-09921 Out-of-bounds read in nss CVSS 3.1CRITICAL 9.1
  • TI-2016-01772 The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS)… CVSS 3.0MEDIUM 6.5
  • TI-2023-04081 Observable discrepancy in Mozilla NSS CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences