Every CVE Search/ Get API key

CVE-2013-1740

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS...

5.8 MediumFix available

CVE-2013-1740 is a medium vulnerability (CVSS 5.8) in Mozilla Network Security Services, published January 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 76th percentile. Fixed in nss 2:3.15.4-1.

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Exploit likelihood

1.66%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.8

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Record
CVE-2013-1740
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Record
CVE-2013-1740
Updated
2026-11-02
EUVDEUVD-2013-1767 No score

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Record
EUVD-2013-1767
Updated
2026-11-03
GitHub AdvisoriesGHSA-26rr-whcg-5f4g No score

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS...

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Record
GHSA-26rr-whcg-5f4g
Updated
2026-11-02
OSV No score

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Record
CVE-2013-1740
Updated
2026-11-02
OSVDEBIAN-CVE-2013-1740 No score

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Record
DEBIAN-CVE-2013-1740
Updated
2026-11-02
OSVMGASA-2014-0024 No score

Updated nss packages fix security vulnerability

Updated nss packages fix security vulnerability:

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic (CVE-2013-1740).

Record
MGASA-2014-0024
Updated
2026-11-02
OSVopenSUSE-SU-2024:10451-1 No score

libfreebl3-3.26.2-1.1 on GA media

These are all security issues fixed in the libfreebl3-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10451-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nss
Debian:12
 before 2:3.15.4-1
2:3.15.4-1
nss
Debian:13
 before 2:3.15.4-1
2:3.15.4-1
nss
Debian:14
 before 2:3.15.4-1
2:3.15.4-1
nss
Mageia:3
 before 3.15.4-1.mga3
3.15.4-1.mga3
nspr
Red Hat:enterprise_linux:6::client
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nspr-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nss
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-sysinit
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-tools
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
Show 55 moreShow less
Affected packages
PackageAffectedFixed
nss-util
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nss-util-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nspr-devel
Red Hat:enterprise_linux:6::client
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nss-devel
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-pkcs11-devel
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-util-devel
Red Hat:enterprise_linux:6::client
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nspr
Red Hat:enterprise_linux:6::computenode
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nspr-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nss
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-sysinit
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-tools
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-util
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nss-util-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nspr-devel
Red Hat:enterprise_linux:6::computenode
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nss-devel
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-pkcs11-devel
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-util-devel
Red Hat:enterprise_linux:6::computenode
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nspr
Red Hat:enterprise_linux:6::server
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nspr-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nspr-devel
Red Hat:enterprise_linux:6::server
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nss
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-devel
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-sysinit
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-tools
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-util
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nss-util-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nss-util-devel
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nss-pkcs11-devel
Red Hat:enterprise_linux:6::server
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nspr
Red Hat:enterprise_linux:6::workstation
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nspr-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nspr-devel
Red Hat:enterprise_linux:6::workstation
 before 0:4.10.6-1.el6_5
0:4.10.6-1.el6_5
nss
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-devel
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-sysinit
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-tools
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss-util
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nss-util-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nss-util-devel
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-1.el6_5
0:3.16.1-1.el6_5
nss-pkcs11-devel
Red Hat:enterprise_linux:6::workstation
 before 0:3.16.1-4.el6_5
0:3.16.1-4.el6_5
nss
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-pkcs11-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss
Red Hat:enterprise_linux:5::client
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-tools
Red Hat:enterprise_linux:5::client
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss
Red Hat:enterprise_linux:5::server
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-devel
Red Hat:enterprise_linux:5::server
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-pkcs11-devel
Red Hat:enterprise_linux:5::server
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
nss-tools
Red Hat:enterprise_linux:5::server
 before 0:3.16.1-2.el5
0:3.16.1-2.el5
mozilla-nss
openSUSE:Tumbleweed
 before 3.26.2-1.1
3.26.2-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 74 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open