{"id":"CVE-2013-1740","aliases":["DEBIAN-CVE-2013-1740","EUVD-2013-1767","GHSA-26rr-whcg-5f4g","MGASA-2014-0024","RHSA-2014:0917","RHSA-2014:1246","openSUSE-SU-2024:10451-1"],"status":"published","title":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS...","description":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01664,"percentile":0.76879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2014-01-18T22:00:00Z","modified":"2026-09-01T20:03:14Z","fixes":[{"ecosystem":"Debian:12","package":"nss","fixed_in":["2:3.15.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["2:3.15.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["2:3.15.4-1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"nss","fixed_in":["3.15.4-1.mga3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.4-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.4-1.mga3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.6-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-1.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-4.el6_5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-2.el5"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.2-1.1"}]}],"bundled":22}],"products":[{"vendor":"mozilla","product":"network_security_services"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://developer.mozilla.org/docs/NSS/NSS_3.15.4_release_notes","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/64944","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90394","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053725","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2088-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=919877","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=498172","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1740","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-26rr-whcg-5f4g"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1740","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0024.html","tags":["advisory"]},{"url":"https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.4_release_notes","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12342","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0917","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1107432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116198","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0917.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1740","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1490","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1490","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1490","tags":["advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-12.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1492","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1544","tags":["advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-63.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1545","tags":["advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-55.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1246","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1035281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110860","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1246.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2834","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-1740","description":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.","status":"published","published":"2014-01-18T22:00:00Z","modified":"2024-08-06T15:13:32.451Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1767","description":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.","status":"published","published":"2014-01-18T22:00:00Z","modified":"2024-08-06T15:13:32Z","updated_at":"2026-11-03T01:56:41.063727Z"}],"ghsa":[{"id":"GHSA-26rr-whcg-5f4g","title":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS...","description":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.","status":"published","published":"2022-05-14T02:54:26Z","modified":"2023-02-02T05:06:50Z","updated_at":"2026-11-02T14:52:22.708662Z"}],"nvd":[{"id":"CVE-2013-1740","description":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.","status":"published","published":"2014-01-18T22:55:03.117Z","modified":"2026-06-16T23:52:02.373Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:48.062712Z"}],"osv":[{"id":"CVE-2013-1740","description":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.","status":"published","published":"2014-01-18T22:55:03Z","modified":"2026-04-16T06:21:22.310909703Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-1740","description":"The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.","status":"published","published":"2014-01-18T22:55:03.117Z","modified":"2026-09-01T20:03:14.842849145Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"MGASA-2014-0024","title":"Updated nss packages fix security vulnerability","description":"Updated nss packages fix security vulnerability:\n\nThe ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla\nNetwork Security Services (NSS) before 3.15.4, when the TLS False\nStart feature is enabled, allows man-in-the-middle attackers to spoof\nSSL servers by using an arbitrary X.509 certificate during certain\nhandshake traffic (CVE-2013-1740).\n","status":"published","published":"2014-01-21T16:23:58Z","modified":"2026-04-16T06:22:20.741217848Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10451-1","title":"libfreebl3-3.26.2-1.1 on GA media","description":"These are all security issues fixed in the libfreebl3-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:31:00.412276Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2014:0917","title":"Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update","status":"published","published":"2024-09-15T21:50:27Z","modified":"2026-06-28T10:10:51Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1246","title":"Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update","status":"published","published":"2024-09-15T21:39:07Z","modified":"2026-06-28T10:11:25Z","updated_at":"2026-11-02T15:53:02.532052Z"}]}}