CVE-2014-1568
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before...
CVE-2014-1568 is a high vulnerability (CVSS 7.5) in Google Chrome, published September 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.7%, the 97th percentile. Fixed in nss 2:3.17.1-1.
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
Exploit likelihood
What each source reports
NVD Score used
7.5
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
- Record
CVE-2014-1568- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
- Record
CVE-2014-1568- Updated
- 2026-11-02
EUVDEUVD-2014-1644 No score
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
- Record
EUVD-2014-1644- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7399-wc2p-9q6p No score
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before...
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
- Record
GHSA-7399-wc2p-9q6p- Updated
- 2026-11-02
OSV No score
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
- Record
CVE-2014-1568- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-1568 No score
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
- Record
DEBIAN-CVE-2014-1568- Updated
- 2026-11-02
Show 6 moreShow less
OSVMGASA-2014-0391 No score
Updated nss packages fix CVE-2014-1568
Updated nss packages fix security vulnerability:
Antoine Delignat-Lavaud, security researcher at Inria Paris in team Prosecco, reported an issue in Network Security Services (NSS) libraries affecting all versions. He discovered that NSS is vulnerable to a variant of a signature forgery attack previously published by Daniel Bleichenbacher. This is due to lenient parsing of ASN.1 values involved in a signature and could lead to the forging of RSA certificates (CVE-2014-1568).
- Record
MGASA-2014-0391- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10451-1 No score
libfreebl3-3.26.2-1.1 on GA media
These are all security issues fixed in the libfreebl3-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10451-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1568 No score
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
- Record
UBUNTU-CVE-2014-1568- Updated
- 2026-11-02
OSVUSN-2360-1 No score
firefox vulnerabilities
Antoine Delignat-Lavaud and others discovered that NSS incorrectly handled parsing ASN.1 values. An attacker could use this issue to forge RSA certificates.
- Record
USN-2360-1- Updated
- 2026-11-02
OSVUSN-2360-2 No score
thunderbird vulnerabilities
USN-2360-1 fixed vulnerabilities in Firefox. This update provides the corresponding updates for Thunderbird.
Original advisory details:
Antoine Delignat-Lavaud and others discovered that NSS incorrectly handled parsing ASN.1 values. An attacker could use this issue to forge RSA certificates.
- Record
USN-2360-2- Updated
- 2026-11-02
OSVUSN-2361-1 No score
nss vulnerability
Antoine Delignat-Lavaud and others discovered that NSS incorrectly handled parsing ASN.1 values. An attacker could use this issue to forge RSA certificates.
- Record
USN-2361-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssDebian:12 |
before 2:3.17.1-1 | 2:3.17.1-1 |
nssDebian:13 |
before 2:3.17.1-1 | 2:3.17.1-1 |
nssDebian:14 |
before 2:3.17.1-1 | 2:3.17.1-1 |
nssDebian:6.0 |
before 3.12.8-1+squeeze9, plus listed versions 3.12.8-13.12.8-1+squeeze13.12.8-1+squeeze1~bpo50+13.12.8-1+squeeze23.12.8-1+squeeze3 Show 7 moreShow less3.12.8-1+squeeze3~bpo50+13.12.8-1+squeeze43.12.8-1+squeeze4~bpo50+13.12.8-1+squeeze53.12.8-1+squeeze63.12.8-1+squeeze73.12.8-1+squeeze8 |
3.12.8-1+squeeze9 |
nssDebian:7 |
before 2:3.14.5-1+deb7u2, plus listed versions 2:3.14.3-12:3.14.4-12:3.14.5-12:3.14.5-1+deb7u12:3.14.5-1~bpo60+1 |
2:3.14.5-1+deb7u2 |
iceweaselDebian:7 |
before 24.8.1esr-1~deb7u1, plus listed versions 10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1 Show 45 moreShow less11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.10esr-1~deb7u117.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-217.0.8esr-117.0.8esr-1~deb7u117.0.8esr-217.0.8esr-2~deb7u117.0.9esr-1~deb7u118.0-118.0.1-118.0.2-1 |
24.8.1esr-1~deb7u1 |
icedoveDebian:7 |
before 24.8.1-1~deb7u1, plus listed versions 10.0.12-111.0-116.0.2-117.0-117.0.10-1 Show 30 moreShow less17.0.10-1+powerpcspe117.0.10-1+powerpcspe217.0.10-1~deb7u117.0.2-117.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u117.0.9-117.0.9-1~deb7u117.0.9-224.0-124.0~b3-224.1.1-124.2.0-124.2.0-1+alpha24.2.0-1+powerpcspe124.3.0-124.3.0-224.4.0-124.4.0-1~deb7u124.5.0-124.5.0-1~deb7u124.5.0-224.6.0-1~deb7u124.7.0-1~deb7u124.8.0-1~deb7u1 |
24.8.1-1~deb7u1 |
nssMageia:3 |
before 3.17.1-1.mga3 | 3.17.1-1.mga3 |
nssMageia:4 |
before 3.17.1-1.1.mga4 | 3.17.1-1.1.mga4 |
nssRed Hat:enterprise_linux:5::client |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
Show 188 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nss-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nss-toolsRed Hat:enterprise_linux:5::client |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nssRed Hat:enterprise_linux:5::client_workstation |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nss-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nssRed Hat:enterprise_linux:5::server |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nss-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nss-develRed Hat:enterprise_linux:5::server |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nss-toolsRed Hat:enterprise_linux:5::server |
before 0:3.16.1-4.el5_11 | 0:3.16.1-4.el5_11 |
nssRed Hat:enterprise_linux:6::client |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-softoknRed Hat:enterprise_linux:6::client |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-freeblRed Hat:enterprise_linux:6::client |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-sysinitRed Hat:enterprise_linux:6::client |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-toolsRed Hat:enterprise_linux:6::client |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-utilRed Hat:enterprise_linux:6::client |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-util-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-develRed Hat:enterprise_linux:6::client |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-pkcs11-develRed Hat:enterprise_linux:6::client |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-softokn-develRed Hat:enterprise_linux:6::client |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-freebl-develRed Hat:enterprise_linux:6::client |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-util-develRed Hat:enterprise_linux:6::client |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nssRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-softoknRed Hat:enterprise_linux:6::computenode |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-freeblRed Hat:enterprise_linux:6::computenode |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-sysinitRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-toolsRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-utilRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-util-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-develRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-pkcs11-develRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-softokn-develRed Hat:enterprise_linux:6::computenode |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-freebl-develRed Hat:enterprise_linux:6::computenode |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-util-develRed Hat:enterprise_linux:6::computenode |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nssRed Hat:enterprise_linux:6::server |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-develRed Hat:enterprise_linux:6::server |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-softoknRed Hat:enterprise_linux:6::server |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-develRed Hat:enterprise_linux:6::server |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-freeblRed Hat:enterprise_linux:6::server |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-freebl-develRed Hat:enterprise_linux:6::server |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-sysinitRed Hat:enterprise_linux:6::server |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-toolsRed Hat:enterprise_linux:6::server |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-utilRed Hat:enterprise_linux:6::server |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-util-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-util-develRed Hat:enterprise_linux:6::server |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-pkcs11-develRed Hat:enterprise_linux:6::server |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nssRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-develRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-softoknRed Hat:enterprise_linux:6::workstation |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-develRed Hat:enterprise_linux:6::workstation |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-freeblRed Hat:enterprise_linux:6::workstation |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-softokn-freebl-develRed Hat:enterprise_linux:6::workstation |
before 0:3.14.3-12.el6_5 | 0:3.14.3-12.el6_5 |
nss-sysinitRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-toolsRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nss-utilRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-util-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-util-develRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-2.el6_5 | 0:3.16.1-2.el6_5 |
nss-pkcs11-develRed Hat:enterprise_linux:6::workstation |
before 0:3.16.1-7.el6_5 | 0:3.16.1-7.el6_5 |
nssRed Hat:enterprise_linux:7::client |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-softoknRed Hat:enterprise_linux:7::client |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-freeblRed Hat:enterprise_linux:7::client |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-sysinitRed Hat:enterprise_linux:7::client |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-toolsRed Hat:enterprise_linux:7::client |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-utilRed Hat:enterprise_linux:7::client |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-util-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-develRed Hat:enterprise_linux:7::client |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-pkcs11-develRed Hat:enterprise_linux:7::client |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-softokn-develRed Hat:enterprise_linux:7::client |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-freebl-develRed Hat:enterprise_linux:7::client |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-util-develRed Hat:enterprise_linux:7::client |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nssRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-softoknRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-freeblRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-sysinitRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-toolsRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-utilRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-util-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-develRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-pkcs11-develRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-softokn-develRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-freebl-develRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-util-develRed Hat:enterprise_linux:7::computenode |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nssRed Hat:enterprise_linux:7::server |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-develRed Hat:enterprise_linux:7::server |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-softoknRed Hat:enterprise_linux:7::server |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-develRed Hat:enterprise_linux:7::server |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-freeblRed Hat:enterprise_linux:7::server |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-freebl-develRed Hat:enterprise_linux:7::server |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-sysinitRed Hat:enterprise_linux:7::server |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-toolsRed Hat:enterprise_linux:7::server |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-utilRed Hat:enterprise_linux:7::server |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-util-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-util-develRed Hat:enterprise_linux:7::server |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-pkcs11-develRed Hat:enterprise_linux:7::server |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nssRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-develRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-softoknRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-develRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-freeblRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-softokn-freebl-develRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-sysinitRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-toolsRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
nss-utilRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-util-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-util-develRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-2.el7_0 | 0:3.16.2-2.el7_0 |
nss-pkcs11-develRed Hat:enterprise_linux:7::workstation |
before 0:3.16.2-7.el7_0 | 0:3.16.2-7.el7_0 |
rhev-hypervisor6Red Hat:rhev_manager:3 |
before 0:6.5-20140930.1.el6ev | 0:6.5-20140930.1.el6ev |
nssRed Hat:rhel_els:4::as |
before 0:3.12.10-10.el4 | 0:3.12.10-10.el4 |
nss-debuginfoRed Hat:rhel_els:4::as |
before 0:3.12.10-10.el4 | 0:3.12.10-10.el4 |
nss-develRed Hat:rhel_els:4::as |
before 0:3.12.10-10.el4 | 0:3.12.10-10.el4 |
nss-toolsRed Hat:rhel_els:4::as |
before 0:3.12.10-10.el4 | 0:3.12.10-10.el4 |
nssRed Hat:rhel_els:4::es |
before 0:3.12.10-10.el4 | 0:3.12.10-10.el4 |
nss-debuginfoRed Hat:rhel_els:4::es |
before 0:3.12.10-10.el4 | 0:3.12.10-10.el4 |
nss-develRed Hat:rhel_els:4::es |
before 0:3.12.10-10.el4 | 0:3.12.10-10.el4 |
nss-toolsRed Hat:rhel_els:4::es |
before 0:3.12.10-10.el4 | 0:3.12.10-10.el4 |
nssRed Hat:rhel_mission_critical:5.6 |
before 0:3.12.8-10.el5_6 | 0:3.12.8-10.el5_6 |
nss-debuginfoRed Hat:rhel_mission_critical:5.6 |
before 0:3.12.8-10.el5_6 | 0:3.12.8-10.el5_6 |
nss-develRed Hat:rhel_mission_critical:5.6 |
before 0:3.12.8-10.el5_6 | 0:3.12.8-10.el5_6 |
nss-pkcs11-develRed Hat:rhel_mission_critical:5.6 |
before 0:3.12.8-10.el5_6 | 0:3.12.8-10.el5_6 |
nss-toolsRed Hat:rhel_mission_critical:5.6 |
before 0:3.12.8-10.el5_6 | 0:3.12.8-10.el5_6 |
nssRed Hat:rhel_eus:5.9 |
before 0:3.14.3-10.el5_9 | 0:3.14.3-10.el5_9 |
nss-debuginfoRed Hat:rhel_eus:5.9 |
before 0:3.14.3-10.el5_9 | 0:3.14.3-10.el5_9 |
nss-develRed Hat:rhel_eus:5.9 |
before 0:3.14.3-10.el5_9 | 0:3.14.3-10.el5_9 |
nss-pkcs11-develRed Hat:rhel_eus:5.9 |
before 0:3.14.3-10.el5_9 | 0:3.14.3-10.el5_9 |
nss-toolsRed Hat:rhel_eus:5.9 |
before 0:3.14.3-10.el5_9 | 0:3.14.3-10.el5_9 |
nssRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-debuginfoRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-softoknRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-softokn-debuginfoRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-softokn-freeblRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-sysinitRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-toolsRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-utilRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-util-debuginfoRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-develRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-pkcs11-develRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-softokn-develRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-softokn-freebl-develRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-util-develRed Hat:rhel_eus:6.4::computenode |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nssRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-11.el6_2 | 0:3.13.1-11.el6_2 |
nss-debuginfoRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-11.el6_2 | 0:3.13.1-11.el6_2 |
nss-develRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-11.el6_2 | 0:3.13.1-11.el6_2 |
nss-softoknRed Hat:rhel_mission_critical:6.2::server |
before 0:3.12.9-12.el6_2 | 0:3.12.9-12.el6_2 |
nss-softokn-debuginfoRed Hat:rhel_mission_critical:6.2::server |
before 0:3.12.9-12.el6_2 | 0:3.12.9-12.el6_2 |
nss-softokn-develRed Hat:rhel_mission_critical:6.2::server |
before 0:3.12.9-12.el6_2 | 0:3.12.9-12.el6_2 |
nss-softokn-freeblRed Hat:rhel_mission_critical:6.2::server |
before 0:3.12.9-12.el6_2 | 0:3.12.9-12.el6_2 |
nss-softokn-freebl-develRed Hat:rhel_mission_critical:6.2::server |
before 0:3.12.9-12.el6_2 | 0:3.12.9-12.el6_2 |
nss-sysinitRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-11.el6_2 | 0:3.13.1-11.el6_2 |
nss-toolsRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-11.el6_2 | 0:3.13.1-11.el6_2 |
nss-utilRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-6.el6_2 | 0:3.13.1-6.el6_2 |
nss-util-debuginfoRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-6.el6_2 | 0:3.13.1-6.el6_2 |
nss-util-develRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-6.el6_2 | 0:3.13.1-6.el6_2 |
nssRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-debuginfoRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-develRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-softoknRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-softokn-debuginfoRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-softokn-develRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-softokn-freeblRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-softokn-freebl-develRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-sysinitRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-toolsRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
nss-utilRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-util-debuginfoRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-util-develRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-4.el6_4 | 0:3.14.3-4.el6_4 |
nss-pkcs11-develRed Hat:rhel_mission_critical:6.2::server |
before 0:3.13.1-11.el6_2 | 0:3.13.1-11.el6_2 |
nss-pkcs11-develRed Hat:rhel_eus:6.4::server |
before 0:3.14.3-8.el6_4 | 0:3.14.3-8.el6_4 |
firefoxUbuntu:14.04:LTS |
before 32.0.3+build1-0ubuntu0.14.04.1, plus listed versions 24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1 Show 5 moreShow less28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.1 |
32.0.3+build1-0ubuntu0.14.04.1 |
nssUbuntu:14.04:LTS |
before 2:3.17.1-0ubuntu0.14.04.1, plus listed versions 2:3.15.1-1ubuntu12:3.15.2-12:3.15.3-12:3.15.3.1-12:3.15.3.1-1.1 Show 8 moreShow less2:3.15.3.1-1.1ubuntu12:3.15.4-1ubuntu32:3.15.4-1ubuntu42:3.15.4-1ubuntu52:3.15.4-1ubuntu62:3.15.4-1ubuntu72:3.15.4-1ubuntu7.12:3.17-0ubuntu0.14.04.1 |
2:3.17.1-0ubuntu0.14.04.1 |
thunderbirdUbuntu:14.04:LTS |
before 1:31.1.2+build1-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1 Show 5 moreShow less1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.1 |
1:31.1.2+build1-0ubuntu0.14.04.1 |
mozilla-nssopenSUSE:Tumbleweed |
before 3.26.2-1.1 | 3.26.2-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
oracle.com/technetwork/topics/security/cpujul2015-2367936.html
kb.cert.org/vuls/id/772676
kb.juniper.net/InfoCenter/index?page=content&id=JSA10698
rhn.redhat.com/errata/RHSA-2014-1307.html
securityfocus.com/bid/70116
Show 89 moreShow less
ubuntu.com/usn/USN-2360-1
exchange.xforce.ibmcloud.com/vulnerabilities/96194
novell.com/support/kb/doc.php?id=7015701
secunia.com/advisories/61575
bugzilla.mozilla.org/show_bug.cgi?id=1069405
bugzilla.mozilla.org/show_bug.cgi?id=1064636
lists.opensuse.org/opensuse-security-announce/2014-09/msg00032.html
googlechromereleases.blogspot.com/2014/09/stable-channel-update_24.html
oracle.com/technetwork/topics/security/cpujan2015-1972971.html
googlechromereleases.blogspot.com/2014/09/stable-channel-update-for-chrome-os_24.html
security.gentoo.org/glsa/201504-01
oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
secunia.com/advisories/61574
ubuntu.com/usn/USN-2361-1
debian.org/security/2014/dsa-3033
kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
debian.org/security/2014/dsa-3034
rhn.redhat.com/errata/RHSA-2014-1371.html
rhn.redhat.com/errata/RHSA-2014-1354.html
debian.org/security/2014/dsa-3037
lists.opensuse.org/opensuse-security-announce/2014-09/msg00036.html
mozilla.org/security/announce/2014/mfsa2014-73.html
ubuntu.com/usn/USN-2360-2
secunia.com/advisories/61540
secunia.com/advisories/61576
lists.opensuse.org/opensuse-security-announce/2014-09/msg00039.html
secunia.com/advisories/61583
nvd.nist.gov/vuln/detail/CVE-2014-1568
github.com/advisories/GHSA-7399-wc2p-9q6p
security-tracker.debian.org/tracker/CVE-2014-1568
advisories.mageia.org/MGASA-2014-0391.html
bugs.mageia.org/show_bug.cgi?id=14168
access.redhat.com/errata/RHSA-2014:1307
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1145429
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1307.json
access.redhat.com/security/cve/CVE-2014-1568
cve.org/CVERecord?id=CVE-2014-1568
access.redhat.com/errata/RHSA-2014:1354
bugzilla.redhat.com/show_bug.cgi?id=1141597
bugzilla.redhat.com/show_bug.cgi?id=1146319
bugzilla.redhat.com/show_bug.cgi?id=1146791
bugzilla.redhat.com/show_bug.cgi?id=1146804
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1354.json
access.redhat.com/security/cve/CVE-2014-6271
access.redhat.com/security/vulnerabilities/shellshock
cve.org/CVERecord?id=CVE-2014-6271
nvd.nist.gov/vuln/detail/CVE-2014-6271
access.redhat.com/articles/1200223
securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2014-7169
cve.org/CVERecord?id=CVE-2014-7169
nvd.nist.gov/vuln/detail/CVE-2014-7169
access.redhat.com/security/cve/CVE-2014-7186
cve.org/CVERecord?id=CVE-2014-7186
nvd.nist.gov/vuln/detail/CVE-2014-7186
access.redhat.com/security/cve/CVE-2014-7187
cve.org/CVERecord?id=CVE-2014-7187
nvd.nist.gov/vuln/detail/CVE-2014-7187
access.redhat.com/errata/RHSA-2014:1371
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1371.json
ubuntu.com/security/CVE-2014-1568
ubuntu.com/security/notices/USN-2360-1
ubuntu.com/security/notices/USN-2360-2
ubuntu.com/security/notices/USN-2361-1
suse.com/security/cve/CVE-2010-3170
suse.com/security/cve/CVE-2011-3389
suse.com/security/cve/CVE-2011-3640
suse.com/security/cve/CVE-2013-0743
suse.com/security/cve/CVE-2013-0791
suse.com/security/cve/CVE-2013-1620
suse.com/security/cve/CVE-2013-1739
suse.com/security/cve/CVE-2013-1740
suse.com/security/cve/CVE-2013-5605
suse.com/security/cve/CVE-2014-1490
suse.com/security/cve/CVE-2014-1491
suse.com/security/cve/CVE-2014-1492
suse.com/security/cve/CVE-2014-1568
suse.com/security/cve/CVE-2014-1569
suse.com/security/cve/CVE-2015-2721
suse.com/security/cve/CVE-2015-4000
suse.com/security/cve/CVE-2015-7181
suse.com/security/cve/CVE-2015-7182
suse.com/security/cve/CVE-2015-7575
suse.com/security/cve/CVE-2016-1950
suse.com/security/cve/CVE-2016-1979
suse.com/security/cve/CVE-2016-2834
Left out here: 28 versions. The JSON record has them.