CVE-2014-1569
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ...
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
Exploit likelihood
What each source reports
NVD Score used
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
- Record
CVE-2014-1569- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
- Record
CVE-2014-1569- Updated
- 2026-11-02
EUVDEUVD-2014-1645 No score
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
- Record
EUVD-2014-1645- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r84h-wf26-r7jw No score
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ...
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
- Record
GHSA-r84h-wf26-r7jw- Updated
- 2026-11-02
OSV No score
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
- Record
CVE-2014-1569- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-1569 No score
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
- Record
DEBIAN-CVE-2014-1569- Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2014-0507 No score
Updated firefox & thunderbird packages fix security vulnerabilities
Updated nss, firefox, and thunderbird packages fix security vulnerabilities:
In the QuickDER decoder in NSS before 3.17.3, ASN.1 DER decoding of lengths is too permissive, allowing undetected smuggling of arbitrary data (CVE-2014-1569).
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it (CVE-2014-1587, CVE-2014-1590, CVE-2014-1592, CVE-2014-1593).
A flaw was found in the Alarm API, which could allow applications to schedule actions to be run in the future. A malicious web application could use this flaw to bypass the same-origin policy (CVE-2014-1594).
This update adds support for the TLS Fallback Signaling Cipher Suite Value (TLS_FALLBACK_SCSV) in NSS, which can be used to prevent protocol downgrade attacks against applications which re-connect using a lower SSL/TLS protocol version when the initial connection indicating the highest supported protocol version fails. This can prevent a forceful downgrade of the communication to SSL 3.0, mitigating CVE-2014-3566, also known as POODLE. SSL 3.0 support has also been disabled by default in this Firefox and Thunderbird update, further mitigating POODLE.
- Record
MGASA-2014-0507- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10451-1 No score
libfreebl3-3.26.2-1.1 on GA media
These are all security issues fixed in the libfreebl3-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10451-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1569 No score
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
- Record
UBUNTU-CVE-2014-1569- Updated
- 2026-11-02
OSVUSN-2452-1 No score
nss vulnerability
It was discovered that NSS incorrectly handled certain ASN.1 lengths. A remote attacker could possibly use this issue to perform a data-smuggling attack.
- Record
USN-2452-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssDebian:12 |
before 2:3.17.2-1.1 | 2:3.17.2-1.1 |
nssDebian:13 |
before 2:3.17.2-1.1 | 2:3.17.2-1.1 |
nssDebian:14 |
before 2:3.17.2-1.1 | 2:3.17.2-1.1 |
nssDebian:6.0 |
before 3.12.8-1+squeeze11, plus listed versions 3.12.8-13.12.8-1+squeeze13.12.8-1+squeeze103.12.8-1+squeeze1~bpo50+13.12.8-1+squeeze2 Show 9 moreShow less3.12.8-1+squeeze33.12.8-1+squeeze3~bpo50+13.12.8-1+squeeze43.12.8-1+squeeze4~bpo50+13.12.8-1+squeeze53.12.8-1+squeeze63.12.8-1+squeeze73.12.8-1+squeeze83.12.8-1+squeeze9 |
3.12.8-1+squeeze11 |
nssDebian:7 |
before 2:3.14.5-1+deb7u4, plus listed versions 2:3.14.3-12:3.14.4-12:3.14.5-12:3.14.5-1+deb7u12:3.14.5-1+deb7u22:3.14.5-1+deb7u32:3.14.5-1~bpo60+1 |
2:3.14.5-1+deb7u4 |
rootcertsMageia:4 |
before 20141117.00-1.mga4 | 20141117.00-1.mga4 |
nssMageia:4 |
before 3.17.3-1.mga4 | 3.17.3-1.mga4 |
firefoxMageia:4 |
before 31.3.0-1.mga4 | 31.3.0-1.mga4 |
firefox-l10nMageia:4 |
before 31.3.0-1.mga4 | 31.3.0-1.mga4 |
thunderbirdMageia:4 |
before 31.3.0-1.mga4 | 31.3.0-1.mga4 |
Show 119 moreShow less
| Package | Affected | Fixed |
|---|---|---|
thunderbird-l10nMageia:4 |
before 31.3.0-1.mga4 | 31.3.0-1.mga4 |
nsprRed Hat:enterprise_linux:5::client |
before 0:4.10.8-1.el5_11 | 0:4.10.8-1.el5_11 |
nspr-debuginfoRed Hat:enterprise_linux:5::client |
before 0:4.10.8-1.el5_11 | 0:4.10.8-1.el5_11 |
nssRed Hat:enterprise_linux:5::client |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-toolsRed Hat:enterprise_linux:5::client |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nsprRed Hat:enterprise_linux:5::client_workstation |
before 0:4.10.8-1.el5_11 | 0:4.10.8-1.el5_11 |
nspr-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:4.10.8-1.el5_11 | 0:4.10.8-1.el5_11 |
nspr-develRed Hat:enterprise_linux:5::client_workstation |
before 0:4.10.8-1.el5_11 | 0:4.10.8-1.el5_11 |
nssRed Hat:enterprise_linux:5::client_workstation |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nsprRed Hat:enterprise_linux:5::server |
before 0:4.10.8-1.el5_11 | 0:4.10.8-1.el5_11 |
nspr-debuginfoRed Hat:enterprise_linux:5::server |
before 0:4.10.8-1.el5_11 | 0:4.10.8-1.el5_11 |
nspr-develRed Hat:enterprise_linux:5::server |
before 0:4.10.8-1.el5_11 | 0:4.10.8-1.el5_11 |
nssRed Hat:enterprise_linux:5::server |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-develRed Hat:enterprise_linux:5::server |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nss-toolsRed Hat:enterprise_linux:5::server |
before 0:3.18.0-6.el5_11 | 0:3.18.0-6.el5_11 |
nsprRed Hat:enterprise_linux:6::client |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nspr-debuginfoRed Hat:enterprise_linux:6::client |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nssRed Hat:enterprise_linux:6::client |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-sysinitRed Hat:enterprise_linux:6::client |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-toolsRed Hat:enterprise_linux:6::client |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-utilRed Hat:enterprise_linux:6::client |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nss-util-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nspr-develRed Hat:enterprise_linux:6::client |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nss-develRed Hat:enterprise_linux:6::client |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-pkcs11-develRed Hat:enterprise_linux:6::client |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-util-develRed Hat:enterprise_linux:6::client |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nsprRed Hat:enterprise_linux:6::computenode |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nspr-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nssRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-sysinitRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-toolsRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-utilRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nss-util-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nspr-develRed Hat:enterprise_linux:6::computenode |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nss-develRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-pkcs11-develRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-util-develRed Hat:enterprise_linux:6::computenode |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nsprRed Hat:enterprise_linux:6::server |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nspr-debuginfoRed Hat:enterprise_linux:6::server |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nspr-develRed Hat:enterprise_linux:6::server |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nssRed Hat:enterprise_linux:6::server |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-develRed Hat:enterprise_linux:6::server |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-sysinitRed Hat:enterprise_linux:6::server |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-toolsRed Hat:enterprise_linux:6::server |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-utilRed Hat:enterprise_linux:6::server |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nss-util-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nss-util-develRed Hat:enterprise_linux:6::server |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nss-pkcs11-develRed Hat:enterprise_linux:6::server |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nsprRed Hat:enterprise_linux:6::workstation |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nspr-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nspr-develRed Hat:enterprise_linux:6::workstation |
before 0:4.10.8-1.el6_6 | 0:4.10.8-1.el6_6 |
nssRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-develRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-sysinitRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-toolsRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nss-utilRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nss-util-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nss-util-develRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-1.el6_6 | 0:3.18.0-1.el6_6 |
nss-pkcs11-develRed Hat:enterprise_linux:6::workstation |
before 0:3.18.0-5.3.el6_6 | 0:3.18.0-5.3.el6_6 |
nsprRed Hat:enterprise_linux:7::client |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nspr-debuginfoRed Hat:enterprise_linux:7::client |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nssRed Hat:enterprise_linux:7::client |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-sysinitRed Hat:enterprise_linux:7::client |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-toolsRed Hat:enterprise_linux:7::client |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-utilRed Hat:enterprise_linux:7::client |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nss-util-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nspr-develRed Hat:enterprise_linux:7::client |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nss-develRed Hat:enterprise_linux:7::client |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-pkcs11-develRed Hat:enterprise_linux:7::client |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-util-develRed Hat:enterprise_linux:7::client |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nsprRed Hat:enterprise_linux:7::computenode |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nspr-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nssRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-sysinitRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-toolsRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-utilRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nss-util-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nspr-develRed Hat:enterprise_linux:7::computenode |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nss-develRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-pkcs11-develRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-util-develRed Hat:enterprise_linux:7::computenode |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nsprRed Hat:enterprise_linux:7::server |
before 0:4.10.8-1.ael7b_1 | 0:4.10.8-1.ael7b_1 |
nspr-debuginfoRed Hat:enterprise_linux:7::server |
before 0:4.10.8-1.ael7b_1 | 0:4.10.8-1.ael7b_1 |
nspr-develRed Hat:enterprise_linux:7::server |
before 0:4.10.8-1.ael7b_1 | 0:4.10.8-1.ael7b_1 |
nssRed Hat:enterprise_linux:7::server |
before 0:3.18.0-2.2.ael7b_1 | 0:3.18.0-2.2.ael7b_1 |
nss-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.18.0-2.2.ael7b_1 | 0:3.18.0-2.2.ael7b_1 |
nss-develRed Hat:enterprise_linux:7::server |
before 0:3.18.0-2.2.ael7b_1 | 0:3.18.0-2.2.ael7b_1 |
nss-sysinitRed Hat:enterprise_linux:7::server |
before 0:3.18.0-2.2.ael7b_1 | 0:3.18.0-2.2.ael7b_1 |
nss-toolsRed Hat:enterprise_linux:7::server |
before 0:3.18.0-2.2.ael7b_1 | 0:3.18.0-2.2.ael7b_1 |
nss-utilRed Hat:enterprise_linux:7::server |
before 0:3.18.0-1.ael7b_1 | 0:3.18.0-1.ael7b_1 |
nss-util-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.18.0-1.ael7b_1 | 0:3.18.0-1.ael7b_1 |
nss-util-develRed Hat:enterprise_linux:7::server |
before 0:3.18.0-1.ael7b_1 | 0:3.18.0-1.ael7b_1 |
nss-pkcs11-develRed Hat:enterprise_linux:7::server |
before 0:3.18.0-2.2.ael7b_1 | 0:3.18.0-2.2.ael7b_1 |
nsprRed Hat:enterprise_linux:7::workstation |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nspr-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nspr-develRed Hat:enterprise_linux:7::workstation |
before 0:4.10.8-1.el7_1 | 0:4.10.8-1.el7_1 |
nssRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-develRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-sysinitRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-toolsRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nss-utilRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nss-util-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nss-util-develRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-1.el7_1 | 0:3.18.0-1.el7_1 |
nss-pkcs11-develRed Hat:enterprise_linux:7::workstation |
before 0:3.18.0-2.2.el7_1 | 0:3.18.0-2.2.el7_1 |
nssUbuntu:14.04:LTS |
before 2:3.17.1-0ubuntu0.14.04.2, plus listed versions 2:3.15.1-1ubuntu12:3.15.2-12:3.15.3-12:3.15.3.1-12:3.15.3.1-1.1 Show 9 moreShow less2:3.15.3.1-1.1ubuntu12:3.15.4-1ubuntu32:3.15.4-1ubuntu42:3.15.4-1ubuntu52:3.15.4-1ubuntu62:3.15.4-1ubuntu72:3.15.4-1ubuntu7.12:3.17-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.1 |
2:3.17.1-0ubuntu0.14.04.2 |
mozilla-nssopenSUSE:Tumbleweed |
before 3.26.2-1.1 | 3.26.2-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1569 is a high vulnerability (CVSS 7.5) in Mozilla Network Security Services, published December 3, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.18%, the 88th percentile. Fixed in nss 2:3.17.2-1.1.
References
bugzilla.mozilla.org/show_bug.cgi?id=1064670
lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
oracle.com/technetwork/topics/security/cpujul2015-2367936.html
developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.3_release_notes
intelsecurity.com/resources/wp-berserk-analysis-part-1.pdf
securitytracker.com/id/1032909
Show 65 moreShow less
imperialviolet.org/2014/09/26/pkcs1.html
debian.org/security/2015/dsa-3186
reddit.com/r/netsec/comments/2hd1m8/rsa_signature_forgery_in_nss/cksnr02
nvd.nist.gov/vuln/detail/CVE-2014-1569
github.com/advisories/GHSA-r84h-wf26-r7jw
security-tracker.debian.org/tracker/CVE-2014-1569
advisories.mageia.org/MGASA-2014-0507.html
bugs.mageia.org/show_bug.cgi?id=14716
mozilla.org/en-US/security/advisories/mfsa2014-83
rhn.redhat.com/errata/RHSA-2014-1948.html
access.redhat.com/errata/RHBA-2015:0925
bugzilla.redhat.com/show_bug.cgi?id=1200905
security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_0925.json
cve.org/CVERecord?id=CVE-2014-1569
ubuntu.com/security/CVE-2014-1569
suse.com/security/cve/CVE-2010-3170