[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2016:0371 -- centos 5 nss

ID: oval:org.secpod.oval:def:203858Date: (C)2016-03-15   (M)2024-01-29
Class: PATCHFamily: unix




Network Security Services is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. A heap-based buffer overflow flaw was found in the way NSS parsed certain ASN.1 structures. An attacker could use this flaw to create a specially crafted certificate which, when parsed by NSS, could cause it to crash, or execute arbitrary code, using the permissions of the user running an application compiled against the NSS library. Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Francis Gabriel as the original reporter. All nss users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all applications linked to the nss library must be restarted, or the system rebooted.

Platform:
CentOS 5
Product:
nss
Reference:
CESA-2016:0371
CVE-2016-1950
CVE    1
CVE-2016-1950
CPE    2
cpe:/a:nss:network_security_services
cpe:/o:centos:centos:5

© SecPod Technologies