{"id":"CVE-2018-18508","aliases":["DEBIAN-CVE-2018-18508","DLA-1704-1","DLA-2388-1","EUVD-2018-10233","GHSA-45r6-rwfw-29cq","RHSA-2019:1951","SUSE-SU-2019:3395-1","UBUNTU-CVE-2018-18508","USN-3898-1","openSUSE-SU-2020:0008-1"],"status":"published","title":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can...","description":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01971,"percentile":0.80562,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2018-12-31T00:00:00Z","modified":"2026-10-23T18:03:56Z","fixes":[{"ecosystem":"Debian:12","package":"nss","fixed_in":["2:3.42.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["2:3.42.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["2:3.42.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"nss","fixed_in":["2:3.28.4-0ubuntu0.14.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nss","fixed_in":["2:3.28.4-0ubuntu0.16.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nss","fixed_in":["2:3.35-2ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.42.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.42.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.42.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26-1+debu8u4"}]}],"versions":["2:3.17.2-1.1","2:3.17.2-1.1+deb8u1","2:3.17.2-1.1+deb8u2","2:3.17.2-1.1+x32","2:3.17.4-1","2:3.18-1","2:3.19-1","2:3.19.1-1","2:3.19.1-2","2:3.19.2-1","2:3.19.2-1+x32.1","2:3.20-1","2:3.20.1-1","2:3.21-1","2:3.21-1.1","2:3.23-1","2:3.23-2","2:3.25-1","2:3.26-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.26.2-1.1+deb9u2"}]}],"versions":["2:3.26.2-1.1","2:3.26.2-1.1+deb9u1"],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nspr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nspr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-sysinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.44.0-7.el8_0"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-3.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.14.04.5"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1","2:3.28.4-0ubuntu0.14.04.2","2:3.28.4-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.5"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1","2:3.28.4-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.3","2:3.28.4-0ubuntu0.16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.2"}]}],"versions":["2:3.32-1ubuntu3","2:3.34-1ubuntu1","2:3.35-2ubuntu2","2:3.35-2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.14.04.5"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1","2:3.28.4-0ubuntu0.14.04.2","2:3.28.4-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.5"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1","2:3.28.4-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.3","2:3.28.4-0ubuntu0.16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.2"}]}],"versions":["2:3.32-1ubuntu3","2:3.34-1ubuntu1","2:3.35-2ubuntu2","2:3.35-2ubuntu2.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.23-lp151.2.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.47.1-lp151.2.9.1"}]}],"bundled":3}],"products":[{"vendor":"mozilla","product":"network_security_services"},{"vendor":"mozilla","product":"nss"},{"vendor":"siemens","product":"ruggedcom_rox_mx5000_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1400_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1500_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1501_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1510_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1511_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx1512_firmware"},{"vendor":"siemens","product":"ruggedcom_rox_rx5000_firmware"}],"references":[{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","article","report"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18508","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-45r6-rwfw-29cq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-18508","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1951","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1722373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1722374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730988","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1951.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18508","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11719","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11719","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11719","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11727","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11727","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11727","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11729","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11729","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17007","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193395-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1141322","tags":["report"]},{"url":"https://bugzilla.suse.com/1158527","tags":["report"]},{"url":"https://bugzilla.suse.com/1159819","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17006","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-18508","tags":["report"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42.1_release_notes","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3898-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3898-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AN4USN47JRBDAYTJ7ARVSFYOKEKTGTFV/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-18508","description":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.","status":"published","published":"2020-10-22T20:14:42Z","modified":"2024-08-05T11:08:22.039Z","updated_at":"2026-11-02T14:35:11.799349Z"}],"euvd":[{"id":"EUVD-2018-10233","description":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.","status":"published","published":"2020-10-22T20:14:42Z","modified":"2024-08-05T11:08:22Z","updated_at":"2026-11-03T02:39:36.317092Z"}],"ghsa":[{"id":"GHSA-45r6-rwfw-29cq","title":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can...","description":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.","status":"published","published":"2022-05-24T17:31:54Z","modified":"2023-01-29T05:05:03Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:45:41.669563Z"}],"nvd":[{"id":"CVE-2018-18508","description":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.","status":"published","published":"2020-10-22T21:15:12.467Z","modified":"2026-06-17T01:47:25.833Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:00.03074Z"}],"osv":[{"id":"CVE-2018-18508","description":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.","status":"published","published":"2020-10-22T21:15:12.467Z","modified":"2026-03-15T22:19:36.562483Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.834469Z"},{"id":"DEBIAN-CVE-2018-18508","description":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.","status":"published","published":"2020-10-22T21:15:12.467Z","modified":"2026-10-23T18:03:56.042793884Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"RHSA-2019:1951","title":"Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:36:00Z","modified":"2026-06-27T10:07:40Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-18508","description":"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.","status":"published","published":"2018-12-31T00:00:00Z","modified":"2026-04-22T11:50:01.660018Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"DLA-1704-1","title":"nss - security update","status":"published","published":"2019-03-04T00:00:00Z","modified":"2026-03-09T01:22:02.140354Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2388-1","title":"nss - security update","status":"published","published":"2020-09-29T00:00:00Z","modified":"2026-03-09T01:17:51.047579Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"openSUSE-SU-2020:0008-1","title":"Security update for mozilla-nspr, mozilla-nss","description":"This update for mozilla-nspr, mozilla-nss fixes the following issues:\n\nmozilla-nss was updated to NSS 3.47.1:\n\nSecurity issues fixed:\n\n- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).\n- CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).\n- CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).\n\nmozilla-nspr was updated to version 4.23:\n\n- Whitespace in C files was cleaned up and no longer uses tab characters for indenting.\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-01-11T19:14:54Z","modified":"2026-02-04T04:03:11.005799Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2019:3395-1","title":"Security update for mozilla-nspr, mozilla-nss","description":"This update for mozilla-nspr, mozilla-nss fixes the following issues:\n\nmozilla-nss was updated to NSS 3.47.1:\n\nSecurity issues fixed:\n\n- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).\n- CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).\n- CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).\n\nmozilla-nspr was updated to version 4.23:\n\n- Whitespace in C files was cleaned up and no longer uses tab characters for indenting.\n","status":"published","published":"2019-12-30T13:05:21Z","modified":"2026-02-04T04:17:02.36777Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-3898-1","title":"nss vulnerability","description":"Hanno Böck and Damian Poddebniak discovered that NSS incorrectly handled\ncertain CMS functions. A remote attacker could possibly use this issue to\ncause NSS to crash, resulting in a denial of service.\n","status":"published","published":"2019-02-27T17:16:15Z","modified":"2026-04-22T09:54:31.38862Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}