{"id":"CVE-2017-7502","aliases":["AZL-110498","DEBIAN-CVE-2017-7502","DLA-971-1","DSA-3872-1","EUVD-2017-16519","GHSA-97vv-2xv8-266j","MGASA-2017-0160","RHSA-2017:1364","RHSA-2017:1365","UBUNTU-CVE-2017-7502","USN-3336-1"],"status":"published","title":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty...","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04302,"percentile":0.91202,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2017-05-30T00:00:00Z","modified":"2026-10-27T05:36:16Z","fixes":[{"ecosystem":"Debian:12","package":"nss","fixed_in":["2:3.26.2-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["2:3.26.2-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["2:3.26.2-1.1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"nss","fixed_in":["2:3.26-1+debu7u4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"nss","fixed_in":["3.28.5-1.mga5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-debuginfo","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-sysinit","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-tools","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-devel","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-pkcs11-devel","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-debuginfo","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-sysinit","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-tools","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-devel","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-pkcs11-devel","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-debuginfo","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-devel","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-sysinit","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-tools","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-pkcs11-devel","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-debuginfo","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-devel","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-sysinit","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-tools","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-pkcs11-devel","fixed_in":["0:3.28.4-3.el6_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-debuginfo","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-sysinit","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-tools","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-devel","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-pkcs11-devel","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-debuginfo","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-sysinit","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-tools","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-devel","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-pkcs11-devel","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-debuginfo","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-devel","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-sysinit","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-tools","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-pkcs11-devel","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-debuginfo","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-devel","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-sysinit","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-tools","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-pkcs11-devel","fixed_in":["0:3.28.4-1.2.el7_3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"nss","fixed_in":["2:3.28.4-0ubuntu0.14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nss","fixed_in":["2:3.28.4-0ubuntu0.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.96.1-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26.2-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26.2-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26.2-1.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26-1+debu7u4"}]}],"versions":["2:3.14.3-1","2:3.14.4-1","2:3.14.5-1","2:3.14.5-1+deb7u1","2:3.14.5-1+deb7u2","2:3.14.5-1+deb7u3","2:3.14.5-1+deb7u4","2:3.14.5-1+deb7u5","2:3.14.5-1+deb7u6","2:3.14.5-1+deb7u7","2:3.14.5-1+deb7u8","2:3.14.5-1~bpo60+1","2:3.15-1","2:3.15.1-1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.4-1","2:3.15.4-2","2:3.16-1","2:3.16.1-1","2:3.16.3-1","2:3.16.3-1.1","2:3.17-1","2:3.17-1+x32","2:3.17.1-1","2:3.17.2-1","2:3.17.2-1+x32","2:3.17.2-1.1","2:3.17.2-1.1+x32","2:3.17.4-1","2:3.18-1","2:3.19-1","2:3.19.1-1","2:3.19.1-2","2:3.19.2-1","2:3.19.2-1+x32.1","2:3.20-1","2:3.20.1-1","2:3.21-1","2:3.21-1.1","2:3.23-1","2:3.23-2","2:3.25-1","2:3.26-1"]},{"source":"osv","ecosystem":"Debian:8","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26-1+debu8u2"}]}],"versions":["2:3.17.2-1.1","2:3.17.2-1.1+deb8u1","2:3.17.2-1.1+deb8u2","2:3.17.2-1.1+x32","2:3.17.4-1","2:3.18-1","2:3.19-1","2:3.19.1-1","2:3.19.1-2","2:3.19.2-1","2:3.19.2-1+x32.1","2:3.20-1","2:3.20.1-1","2:3.21-1","2:3.21-1.1","2:3.23-1","2:3.23-2","2:3.25-1","2:3.26-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-1.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-3.el6_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-1.2.el7_3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.14.04.2"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.2"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.14.04.2"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.2"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1"]}],"products":[{"vendor":"mozilla","product":"network_security_services"},{"vendor":"mozilla","product":"nss"},{"vendor":"nss project","product":"nss"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:1365","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1038579","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/98744","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1712","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://hg.mozilla.org/projects/nss/rev/55ea60effd0d","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1364","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1567","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3872","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7502","tags":["web","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446631","tags":["report"]},{"url":"https://github.com/advisories/GHSA-97vv-2xv8-266j"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-7502","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0160.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20989","tags":["report"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28.5_release_notes","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2017-1365.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1364.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7502","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1365.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7502","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3336-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3372-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-7502","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","status":"published","published":"2017-05-30T18:00:00Z","modified":"2024-08-05T16:04:11.874Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16519","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","status":"published","published":"2017-05-30T18:00:00Z","modified":"2024-08-05T16:04:11Z","updated_at":"2026-11-03T02:39:08.461482Z"}],"ghsa":[{"id":"GHSA-97vv-2xv8-266j","title":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty...","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","status":"published","published":"2022-05-14T03:53:46Z","modified":"2023-02-10T05:06:16Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:54:01.286462Z"}],"nvd":[{"id":"CVE-2017-7502","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","status":"published","published":"2017-05-30T18:29:00.237Z","modified":"2026-06-17T01:24:28.73Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:03:49.449157Z"}],"osv":[{"id":"AZL-110498","title":"CVE-2017-7502 affecting package nss 3.96.1-3","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","status":"published","published":"2017-05-30T18:29:00Z","modified":"2026-10-27T05:36:16Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:02.368326Z"},{"id":"CVE-2017-7502","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","status":"published","published":"2017-05-30T18:29:00.237Z","modified":"2026-04-16T06:23:52.130948903Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"DEBIAN-CVE-2017-7502","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","status":"published","published":"2017-05-30T18:29:00.237Z","modified":"2026-09-01T20:03:50.287026597Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.412243Z"},{"id":"RHSA-2017:1364","title":"Red Hat Security Advisory: nss security and bug fix update","status":"published","published":"2024-09-16T00:21:19Z","modified":"2026-06-26T12:22:07.136289757Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1365","title":"Red Hat Security Advisory: nss security and bug fix update","status":"published","published":"2024-09-16T00:21:25Z","modified":"2026-06-26T12:22:06.677406928Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-7502","description":"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.","status":"published","published":"2017-05-30T00:00:00Z","modified":"2026-04-22T11:31:32.162331Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"DLA-971-1","title":"nss - security update","status":"published","published":"2017-05-31T00:00:00Z","modified":"2026-03-09T02:08:52.332349Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"DSA-3872-1","title":"nss - security update","status":"published","published":"2017-06-01T00:00:00Z","modified":"2026-03-09T01:20:45.091111Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0160","title":"Updated nss packages fix security vulnerability","description":"A null pointer dereference flaw was found in the way NSS handled empty\nSSLv2 messages. An attacker could use this flaw to crash a server\napplication compiled against the NSS library (CVE-2017-7502).\n","status":"published","published":"2017-06-08T21:39:47Z","modified":"2026-04-16T06:23:30.938057402Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"USN-3336-1","title":"nss vulnerability","description":"It was discovered that NSS incorrectly handled certain empty SSLv2\nmessages. A remote attacker could possibly use this issue to cause NSS to\ncrash, resulting in a denial of service.\n","status":"published","published":"2017-06-21T16:35:25Z","modified":"2026-04-22T09:37:20.103338Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}