{"id":"CVE-2013-1739","aliases":["DEBIAN-CVE-2013-1739","DSA-2790-1","EUVD-2013-1766","GHSA-9j62-mm37-x965","MGASA-2013-0320","RHSA-2013:1791","RHSA-2013:1829","openSUSE-SU-2024:10451-1"],"status":"published","title":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are...","description":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03406,"percentile":0.88948,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2013-10-22T22:00:00Z","modified":"2026-09-01T20:03:14Z","fixes":[{"ecosystem":"Debian:12","package":"nss","fixed_in":["2:3.15.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["2:3.15.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["2:3.15.2-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"nss","fixed_in":["2:3.14.4-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.2-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.14.4-1"}]}],"versions":["2:3.14.3-1"]},{"source":"osv","ecosystem":"Mageia:2","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.17-1.mga2"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:2","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20130411.00-1.mga2"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:2","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-1.mga2"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:2","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.2-1.1.mga2"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.0-1.mga2"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:2","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.0-1.mga2"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:3","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.17-1.mga3"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:3","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20130411.00-1.mga3"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:3","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-1.mga3"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:3","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.2-1.1.mga3"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.0-1.mga3"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:3","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.0-1.mga3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.2-1.1"}]}],"bundled":22}],"products":[{"vendor":"mozilla","product":"network_security_services"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1012656","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.2_release_notes","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2790","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=894370","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-19.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2030-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-93.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19254","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1791.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10761","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-10/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/62966","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1829.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-10/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1739","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9j62-mm37-x965"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1739","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0320.html","tags":["advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-95.html","tags":["web"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-96.html","tags":["web"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-98.html","tags":["web"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-100.html","tags":["web"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-101.html","tags":["web"]},{"url":"http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html","tags":["web"]},{"url":"http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2013:257/","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1476.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11370","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1791","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-103.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1012740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1030807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1031457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1031458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1031461","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1791.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1739","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1739","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1741","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1741","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1741","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5605","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5606","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5607","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1829","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1829.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2834","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-1739","description":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.","status":"published","published":"2013-10-22T22:00:00Z","modified":"2024-08-06T15:13:32.238Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1766","description":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.","status":"published","published":"2013-10-22T22:00:00Z","modified":"2024-08-06T15:13:32Z","updated_at":"2026-11-03T01:56:41.063727Z"}],"ghsa":[{"id":"GHSA-9j62-mm37-x965","title":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are...","description":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.","status":"published","published":"2022-05-14T02:54:26Z","modified":"2023-02-02T05:06:50Z","updated_at":"2026-11-02T14:52:22.708662Z"}],"nvd":[{"id":"CVE-2013-1739","description":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.","status":"published","published":"2013-10-22T22:55:04.237Z","modified":"2026-06-16T23:52:02.177Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"CVE-2013-1739","description":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.","status":"published","published":"2013-10-22T22:55:04Z","modified":"2026-04-16T06:21:02.087730861Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-1739","description":"Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.","status":"published","published":"2013-10-22T22:55:04.237Z","modified":"2026-09-01T20:03:14.797999502Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"DSA-2790-1","title":"nss - uninitialized memory read","status":"published","published":"2013-11-02T00:00:00Z","modified":"2026-03-09T01:21:13.882941Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0320","title":"Updated firefox \u0026 related packages fix multiple security vulnerabilities","description":"Updated firefox packages fix security vulnerabilities:\n\nMozilla Network Security Services (NSS) before 3.15.2 does not ensure\nthat data structures are initialized before read operations, which\nallow remote attackers to cause a denial of service or possibly have\nunspecified other impact via vectors that trigger a decryption failure\n(CVE-2013-1739).\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to terminate\nunexpectedly or, potentially, execute arbitrary code with the privileges of\nthe user running Firefox (CVE-2013-5590, CVE-2013-5597, CVE-2013-5599,\nCVE-2013-5600, CVE-2013-5601, CVE-2013-5602).\n\nIt was found that the Firefox JavaScript engine incorrectly allocated\nmemory for certain functions. An attacker could combine this flaw with\nother vulnerabilities to execute arbitrary code with the privileges of the\nuser running Firefox (CVE-2013-5595).\n\nA flaw was found in the way Firefox handled certain Extensible Stylesheet\nLanguage Transformations (XSLT) files. An attacker could combine this flaw\nwith other vulnerabilities to execute arbitrary code with the privileges of\nthe user running Firefox (CVE-2013-5604).\n\nAdditionally, the rootcerts, nspr, nss, and sqlite3 packages have been updated\nto newer versions required by this update.\n","status":"published","published":"2013-11-09T18:55:13Z","modified":"2026-04-16T06:26:29.761972259Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10451-1","title":"libfreebl3-3.26.2-1.1 on GA media","description":"These are all security issues fixed in the libfreebl3-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:31:00.412276Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2013:1791","title":"Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update","status":"published","published":"2024-09-15T21:13:32Z","modified":"2026-06-28T10:09:00Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:1829","title":"Red Hat Security Advisory: nss, nspr, and nss-util security update","status":"published","published":"2024-09-15T21:13:39Z","modified":"2026-06-28T10:09:10Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}