[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-1739Date: (C)2013-10-24   (M)2024-03-27


Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
http://www.securityfocus.com/archive/1/archive/1/534161/100/0/threaded
http://seclists.org/fulldisclosure/2015/Apr/5
BID-62966
DSA-2790
GLSA-201406-19
RHSA-2013:1791
RHSA-2013:1829
SUSE-SU-2013:1678
USN-2030-1
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
http://packetstormsecurity.com/files/131271/VMware-Security-Advisory-2015-0003.html
http://www.mozilla.org/security/announce/2013/mfsa2013-93.html
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://www.vmware.com/security/advisories/VMSA-2014-0012.html
https://bugzilla.mozilla.org/show_bug.cgi?id=894370
https://bugzilla.redhat.com/show_bug.cgi?id=1012656
https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.2_release_notes
openSUSE-SU-2013:1539
openSUSE-SU-2013:1542
oval:org.mitre.oval:def:19254

CPE    20
cpe:/a:mozilla:network_security_services:3.12.1
cpe:/a:mozilla:network_security_services:3.12.3
cpe:/a:mozilla:network_security_services:3.14.1
cpe:/a:mozilla:network_security_services:3.12.2
...
OVAL    19
oval:org.secpod.oval:def:1300245
oval:org.secpod.oval:def:601140
oval:org.secpod.oval:def:701470
oval:org.secpod.oval:def:1300241
...

© SecPod Technologies