Every CVE Search/ Get API key

CVE-2013-0791

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in...

5.0 MediumFix available

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.

Exploit likelihood

5.21%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.

Record
CVE-2013-0791
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.

Record
CVE-2013-0791
Updated
2026-11-02
EUVDEUVD-2013-0802 No score

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.

Record
EUVD-2013-0802
Updated
2026-11-03
GitHub AdvisoriesGHSA-7x34-3f9v-qrcr No score

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in...

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.

Record
GHSA-7x34-3f9v-qrcr
Weakness
CWE-119
Updated
2026-11-02
OSV No score

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.

Record
CVE-2013-0791
Updated
2026-11-02
OSVDEBIAN-CVE-2013-0791 No score

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.

Record
DEBIAN-CVE-2013-0791
Updated
2026-11-02
OSVopenSUSE-SU-2024:10451-1 No score

libfreebl3-3.26.2-1.1 on GA media

These are all security issues fixed in the libfreebl3-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10451-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nss
Debian:12
 before 2:3.14.3-1
2:3.14.3-1
nss
Debian:13
 before 2:3.14.3-1
2:3.14.3-1
nss
Debian:14
 before 2:3.14.3-1
2:3.14.3-1
nspr
Red Hat:enterprise_linux:5::server
 before 0:4.9.5-1.el5_9
0:4.9.5-1.el5_9
nspr-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:4.9.5-1.el5_9
0:4.9.5-1.el5_9
nspr-devel
Red Hat:enterprise_linux:5::server
 before 0:4.9.5-1.el5_9
0:4.9.5-1.el5_9
nss
Red Hat:enterprise_linux:5::server
 before 0:3.14.3-6.el5_9
0:3.14.3-6.el5_9
nss-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.14.3-6.el5_9
0:3.14.3-6.el5_9
nss-devel
Red Hat:enterprise_linux:5::server
 before 0:3.14.3-6.el5_9
0:3.14.3-6.el5_9
nss-pkcs11-devel
Red Hat:enterprise_linux:5::server
 before 0:3.14.3-6.el5_9
0:3.14.3-6.el5_9
Show 71 moreShow less
Affected packages
PackageAffectedFixed
nss-tools
Red Hat:enterprise_linux:5::server
 before 0:3.14.3-6.el5_9
0:3.14.3-6.el5_9
nspr
Red Hat:enterprise_linux:6::client
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nspr-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nss
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-softokn
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-freebl
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-sysinit
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-tools
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-util
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-util-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nspr-devel
Red Hat:enterprise_linux:6::client
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nss-devel
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-pkcs11-devel
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-softokn-devel
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-freebl-devel
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-util-devel
Red Hat:enterprise_linux:6::client
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nspr
Red Hat:enterprise_linux:6::computenode
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nspr-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nss
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-softokn
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-freebl
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-sysinit
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-tools
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-util
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-util-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nspr-devel
Red Hat:enterprise_linux:6::computenode
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nss-devel
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-pkcs11-devel
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-softokn-devel
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-freebl-devel
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-util-devel
Red Hat:enterprise_linux:6::computenode
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nspr
Red Hat:enterprise_linux:6::server
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nspr-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nspr-devel
Red Hat:enterprise_linux:6::server
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nss
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-devel
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-softokn
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-devel
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-freebl
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-freebl-devel
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-sysinit
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-tools
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-util
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-util-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-util-devel
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-pkcs11-devel
Red Hat:enterprise_linux:6::server
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nspr
Red Hat:enterprise_linux:6::workstation
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nspr-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nspr-devel
Red Hat:enterprise_linux:6::workstation
 before 0:4.9.5-2.el6_4
0:4.9.5-2.el6_4
nss
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-devel
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-softokn
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-devel
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-freebl
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-softokn-freebl-devel
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-sysinit
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-tools
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
nss-util
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-util-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-util-devel
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-3.el6_4
0:3.14.3-3.el6_4
nss-pkcs11-devel
Red Hat:enterprise_linux:6::workstation
 before 0:3.14.3-4.el6_4
0:3.14.3-4.el6_4
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.4-20130815.0.el6_4
0:6.4-20130815.0.el6_4
mozilla-nss
openSUSE:Tumbleweed
 before 3.26.2-1.1
3.26.2-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-0791 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published April 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.21%, the 92nd percentile. Fixed in nss 2:3.14.3-1.

References

Show 66 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open