{"id":"CVE-2013-1741","aliases":["DEBIAN-CVE-2013-1741","DLA-23-1","DSA-2994-1","EUVD-2013-1768","GHSA-9953-888v-2xw2","MGASA-2013-0337","RHSA-2013:1791","RHSA-2013:1829"],"status":"published","title":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote...","description":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03893,"percentile":0.90322,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2013-11-16T15:00:00Z","modified":"2026-09-01T20:03:14Z","fixes":[{"ecosystem":"Debian:12","package":"nss","fixed_in":["2:3.15.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["2:3.15.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["2:3.15.3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.15.3-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1+squeeze8"}]}],"versions":["3.12.8-1","3.12.8-1+squeeze1","3.12.8-1+squeeze1~bpo50+1","3.12.8-1+squeeze2","3.12.8-1+squeeze3","3.12.8-1+squeeze3~bpo50+1","3.12.8-1+squeeze4","3.12.8-1+squeeze4~bpo50+1","3.12.8-1+squeeze5","3.12.8-1+squeeze6","3.12.8-1+squeeze7"],"bundled":4},{"source":"osv","ecosystem":"Debian:7","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.14.5-1+deb7u1"}]}],"versions":["2:3.14.3-1","2:3.14.4-1","2:3.14.5-1","2:3.14.5-1~bpo60+1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:2","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20131111.00-1.mga2"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:2","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.2-1.mga2"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:2","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.3-1.mga2"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.1-1.mga2"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:2","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.1-1.mga2"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20131111.00-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.2-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.3-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.1-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.1-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-2.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-3.el5_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.2-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-1.el6_5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15.3-2.el6_5"}]}],"bundled":5}],"products":[{"vendor":"mozilla","product":"network_security_services"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://support.apple.com/kb/HT204941","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://developer.mozilla.org/docs/NSS/NSS_3.15.3_release_notes","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2994","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=925100","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.securityfocus.com/bid/63736","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201504-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-19.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2030-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2031-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2032-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1791.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10761","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://support.apple.com/kb/HT204942","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-103.html","tags":["x_refsource_CONFIRM","x_transferred","web","article"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1829.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1741","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9953-888v-2xw2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1741","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0337.html","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/mozilla.dev.tech.nspr/_8AcygMEjSA","tags":["web"]},{"url":"https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.3_release_notes","tags":["web"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=932310","tags":["report"]},{"url":"https://www.mozilla.org/en-US/firefox/24.1.1/releasenotes/","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11669","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1791","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1012740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1030807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1031457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1031458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1031461","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1791.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1739","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1739","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1739","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1741","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1741","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5605","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5606","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-5607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5607","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1829","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1829.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-1741","description":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.","status":"published","published":"2013-11-16T15:00:00Z","modified":"2024-08-06T15:13:32.534Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1768","description":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.","status":"published","published":"2013-11-16T15:00:00Z","modified":"2024-08-06T15:13:32Z","updated_at":"2026-11-03T01:56:41.063727Z"}],"ghsa":[{"id":"GHSA-9953-888v-2xw2","title":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote...","description":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.","status":"published","published":"2022-05-14T02:54:26Z","modified":"2023-02-02T05:06:50Z","updated_at":"2026-11-02T14:52:22.708662Z"}],"nvd":[{"id":"CVE-2013-1741","description":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.","status":"published","published":"2013-11-18T05:23:57.427Z","modified":"2026-06-16T23:52:02.55Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"CVE-2013-1741","description":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.","status":"published","published":"2013-11-18T05:23:57Z","modified":"2026-04-16T06:24:39.039748363Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-1741","description":"Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.","status":"published","published":"2013-11-18T05:23:57.427Z","modified":"2026-09-01T20:03:14.782925154Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"DLA-23-1","title":"nss - security update","status":"published","published":"2014-07-31T00:00:00Z","modified":"2026-03-09T01:22:26.536537Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-2994-1","title":"nss - security update","status":"published","published":"2014-07-31T00:00:00Z","modified":"2026-03-09T01:22:35.34186Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2013-0337","title":"Updated firefox, rootcerts, nspr \u0026 nss packages fix security vulnerabilities","description":"Updated nspr and nss packages fix security vulnerabilities:\n\nPotentially exploitable buffer overflow in NSS before 3.15.3 that allows\nremote attackers to cause a denial of service or possibly have unspecified\nother impact via invalid handshake packets (CVE-2013-5605).\n\nThe CERT_VerifyCert function in lib/certhigh/certvfy.c in NSS before 3.15.3\nprovides an unexpected return value for an incompatible key-usage certificate\nwhen the CERTVerifyLog argument is valid, which might allow remote attackers\nto bypass intended access restrictions via a crafted certificate\n(CVE-2013-5606).\n\nRunaway memset due to an integer truncation in certificate parsing on 64-bit\ncomputers in NSS before 3.15.3 leading to a crash by attempting to write 4Gb\nof nulls (CVE-2013-1741).\n\nInteger overflow in NSPR before 4.10.2 due to unsigned integer wrapping in\nPL_ArenaAllocate (CVE-2013-5607).\n\nNSS lowered the priority of RC4 in cipher suite advertisement so that more\nsecure ciphers instead of RC4 are likely to be chosen by the server, because\nof plaintext recovery attacks possible with RC4 (CVE-2013-2566).\n\nThis also updates to the latest root certificate data from Mozilla.\n\nAdditionally, The latest Firefox ESR version, which fixes an issue with\ntranslated strings not being used in some cases, is also being provided.\n","status":"published","published":"2013-11-20T20:54:49Z","modified":"2026-04-16T06:23:57.355587943Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2013:1791","title":"Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update","status":"published","published":"2024-09-15T21:13:32Z","modified":"2026-06-28T10:09:00Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:1829","title":"Red Hat Security Advisory: nss, nspr, and nss-util security update","status":"published","published":"2024-09-15T21:13:39Z","modified":"2026-06-28T10:09:10Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}