{"id":"CVE-2014-1569","aliases":["DEBIAN-CVE-2014-1569","DLA-154-1","DSA-3186-1","EUVD-2014-1645","GHSA-r84h-wf26-r7jw","MGASA-2014-0507","RHBA-2015:0925","RHBA-2015:0926","RHBA-2015:0965","UBUNTU-CVE-2014-1569","USN-2452-1","openSUSE-SU-2024:10451-1"],"status":"published","title":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ...","description":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03182,"percentile":0.88161,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-12-03T19:27:32Z","modified":"2026-10-23T15:47:32Z","fixes":[{"ecosystem":"Debian:12","package":"nss","fixed_in":["2:3.17.2-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["2:3.17.2-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["2:3.17.2-1.1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"nss","fixed_in":["2:3.14.5-1+deb7u4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr","fixed_in":["0:4.10.8-1.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-debuginfo","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-tools","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr","fixed_in":["0:4.10.8-1.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-devel","fixed_in":["0:4.10.8-1.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-debuginfo","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-devel","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr","fixed_in":["0:4.10.8-1.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-devel","fixed_in":["0:4.10.8-1.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-debuginfo","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-devel","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-tools","fixed_in":["0:3.18.0-6.el5_11"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-debuginfo","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-sysinit","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-tools","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-debuginfo","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-devel","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-devel","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-devel","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-debuginfo","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-sysinit","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-tools","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-debuginfo","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-devel","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-devel","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-devel","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-devel","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-debuginfo","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-devel","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-sysinit","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-tools","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-debuginfo","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-devel","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-devel","fixed_in":["0:4.10.8-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-debuginfo","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-devel","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-sysinit","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-tools","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-debuginfo","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-devel","fixed_in":["0:3.18.0-1.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-5.3.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-debuginfo","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-sysinit","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-tools","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util-debuginfo","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr-devel","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-devel","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util-devel","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-debuginfo","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-sysinit","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-tools","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util-debuginfo","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr-devel","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-devel","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util-devel","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr","fixed_in":["0:4.10.8-1.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr-devel","fixed_in":["0:4.10.8-1.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss","fixed_in":["0:3.18.0-2.2.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-debuginfo","fixed_in":["0:3.18.0-2.2.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-devel","fixed_in":["0:3.18.0-2.2.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-sysinit","fixed_in":["0:3.18.0-2.2.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-tools","fixed_in":["0:3.18.0-2.2.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util","fixed_in":["0:3.18.0-1.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util-debuginfo","fixed_in":["0:3.18.0-1.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util-devel","fixed_in":["0:3.18.0-1.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-2.2.ael7b_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr-debuginfo","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr-devel","fixed_in":["0:4.10.8-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-debuginfo","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-devel","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-sysinit","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-tools","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util-debuginfo","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util-devel","fixed_in":["0:3.18.0-1.el7_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-pkcs11-devel","fixed_in":["0:3.18.0-2.2.el7_1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"nss","fixed_in":["2:3.17.1-0ubuntu0.14.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.17.2-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.17.2-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.17.2-1.1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1+squeeze11"}]}],"versions":["3.12.8-1","3.12.8-1+squeeze1","3.12.8-1+squeeze10","3.12.8-1+squeeze1~bpo50+1","3.12.8-1+squeeze2","3.12.8-1+squeeze3","3.12.8-1+squeeze3~bpo50+1","3.12.8-1+squeeze4","3.12.8-1+squeeze4~bpo50+1","3.12.8-1+squeeze5","3.12.8-1+squeeze6","3.12.8-1+squeeze7","3.12.8-1+squeeze8","3.12.8-1+squeeze9"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.14.5-1+deb7u4"}]}],"versions":["2:3.14.3-1","2:3.14.4-1","2:3.14.5-1","2:3.14.5-1+deb7u1","2:3.14.5-1+deb7u2","2:3.14.5-1+deb7u3","2:3.14.5-1~bpo60+1"]},{"source":"osv","ecosystem":"Mageia:4","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20141117.00-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.3-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.3.0-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.3.0-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.3.0-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.3.0-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-6.el5_11"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-5.3.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.ael7b_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.8-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-1.el7_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-2.2.el7_1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.17.1-0ubuntu0.14.04.2"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.17.1-0ubuntu0.14.04.2"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.2-1.1"}]}],"bundled":22}],"products":[{"vendor":"mozilla","product":"network_security_services"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1064670","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.3_release_notes","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"http://www.intelsecurity.com/resources/wp-berserk-analysis-part-1.pdf","tags":["x_refsource_MISC","x_transferred","Exploit","evidence","report"]},{"url":"http://www.securitytracker.com/id/1032909","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://www.imperialviolet.org/2014/09/26/pkcs1.html","tags":["x_refsource_MISC","x_transferred","Exploit","evidence","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3186","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://www.reddit.com/r/netsec/comments/2hd1m8/rsa_signature_forgery_in_nss/cksnr02","tags":["x_refsource_MISC","x_transferred","Exploit","evidence","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1569","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r84h-wf26-r7jw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-1569","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0507.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14716","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2014-83/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2014-85/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2014-87/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2014-88/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2014-89/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-1948.html","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-1919.html","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-1924.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHBA-2015:0925","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1200905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1200921","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_0925.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1174492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1569","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHBA-2015:0926","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1205064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1205065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207052","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_0926.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2015:0965","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211373","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_0965.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-1569","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2452-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2834","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-1569","description":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.","status":"published","published":"2014-12-15T17:27:00Z","modified":"2024-08-06T09:42:36.632Z","updated_at":"2026-11-02T14:33:46.310517Z"}],"euvd":[{"id":"EUVD-2014-1645","description":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.","status":"published","published":"2014-12-15T17:27:00Z","modified":"2024-08-06T09:42:36Z","updated_at":"2026-11-03T01:57:17.920284Z"}],"ghsa":[{"id":"GHSA-r84h-wf26-r7jw","title":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ...","description":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.","status":"published","published":"2022-05-17T00:50:14Z","modified":"2023-02-03T05:02:28Z","updated_at":"2026-11-02T14:53:10.732497Z"}],"nvd":[{"id":"CVE-2014-1569","description":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.","status":"published","published":"2014-12-15T18:59:00.067Z","modified":"2026-06-17T00:05:11.163Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"CVE-2014-1569","description":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.","status":"published","published":"2014-12-15T18:59:00Z","modified":"2026-04-16T06:21:47.704783982Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-1569","description":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.","status":"published","published":"2014-12-15T18:59:00.067Z","modified":"2026-10-23T15:47:32.626107807Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DLA-154-1","title":"nss - security update","status":"published","published":"2015-02-16T00:00:00Z","modified":"2026-03-09T01:19:44.447033Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3186-1","title":"nss - security update","status":"published","published":"2015-03-13T00:00:00Z","modified":"2026-03-09T01:23:32.821902Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0507","title":"Updated firefox \u0026 thunderbird packages fix security vulnerabilities","description":"Updated nss, firefox, and thunderbird packages fix security vulnerabilities:\n\nIn the QuickDER decoder in NSS before 3.17.3, ASN.1 DER decoding of lengths\nis too permissive, allowing undetected smuggling of arbitrary data\n(CVE-2014-1569).\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox or Thunderbird to\ncrash or, potentially, execute arbitrary code with the privileges of the\nuser running it (CVE-2014-1587, CVE-2014-1590, CVE-2014-1592,\nCVE-2014-1593).\n\nA flaw was found in the Alarm API, which could allow applications to\nschedule actions to be run in the future. A malicious web application could\nuse this flaw to bypass the same-origin policy (CVE-2014-1594).\n\nThis update adds support for the TLS Fallback Signaling Cipher Suite Value\n(TLS_FALLBACK_SCSV) in NSS, which can be used to prevent protocol downgrade\nattacks against applications which re-connect using a lower SSL/TLS\nprotocol version when the initial connection indicating the highest\nsupported protocol version fails. This can prevent a forceful downgrade of\nthe communication to SSL 3.0, mitigating CVE-2014-3566, also known as\nPOODLE.  SSL 3.0 support has also been disabled by default in this Firefox\nand Thunderbird update, further mitigating POODLE.\n","status":"published","published":"2014-12-03T19:27:32Z","modified":"2026-04-16T06:22:49.018685185Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10451-1","title":"libfreebl3-3.26.2-1.1 on GA media","description":"These are all security issues fixed in the libfreebl3-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:31:00.412276Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHBA-2015:0925","title":"Red Hat Bug Fix Advisory: nss and nspr bug fix and enhancement update","status":"published","published":"2024-09-15T22:30:23Z","modified":"2026-06-28T10:12:35Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHBA-2015:0926","title":"Red Hat Bug Fix Advisory: nss, nss-util, and nspr bug fix and enhancement update","status":"published","published":"2024-09-15T22:30:30Z","modified":"2026-06-28T10:12:35Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHBA-2015:0965","title":"Red Hat Bug Fix Advisory: nss, nss-util, and nspr bug fix and enhancement update","status":"published","published":"2024-09-15T22:30:36Z","modified":"2026-06-28T10:12:37Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"UBUNTU-CVE-2014-1569","description":"The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.","status":"published","published":"2014-12-15T00:00:00Z","modified":"2026-04-22T09:34:39.24022Z","updated_at":"2026-11-02T15:54:07.855521Z"},{"id":"USN-2452-1","title":"nss vulnerability","description":"It was discovered that NSS incorrectly handled certain ASN.1 lengths. A\nremote attacker could possibly use this issue to perform a data-smuggling\nattack.\n","status":"published","published":"2015-01-07T17:41:13Z","modified":"2026-04-22T09:04:37.226604Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}