CPE Details
Mozilla Network Security Services 3.41
3.41
2019-05-03
10h47 +00:00
10h47 +00:00
2019-05-03
10h47 +00:00
10h47 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:mozilla:network_security_services:3.41:*:*:*:*:*:*:*
Informations
Vendor
mozillaProduct
network_security_servicesVersion
3.41Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service. | 7.5 |
High |
||
| In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow. | 9.8 |
Critical |
||
| In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service. | 6.5 |
Medium |
||
| A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58. | 7.5 |
High |
