nss vulnerabilities (Debian)
89 vulnerabilities.
nssDebianUse-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network...7.3 HighnssDebianUse-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla...8.8 HighnssDebianHeap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x...8.8 HighnssDebianThe SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,...5.9 MediumnssDebianThe s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3...6.5 MediumnssDebianMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...5.9 MediumnssDebianHeap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before...9.8 CriticalnssDebianThe sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and...7.5 HighnssDebianMozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0,...4.3 MediumnssDebianMozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,...4.3 MediumnssDebianThe definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ...7.5 HighnssDebianMozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before...7.5 HighnssDebianUse-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla...10.0 HighnssDebianThe cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation...4.3 MediumnssDebianMozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,...4.3 MediumnssDebianRace condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in...9.3 HighnssDebianThe ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS...5.8 MediumnssDebianThe CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS)...5.8 MediumnssDebianMozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote...7.5 HighnssDebianInteger overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote...7.5 HighnssDebianMozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are...5.0 MediumnssDebianThe CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in...5.0 MediumnssDebianThe TLS implementation in Mozilla Network Security Services (NSS) does not properly consider...4.3 MediumnssDebiannss - mis-issued intermediatesNo scorenssDebianThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...3.7 LownssDebianThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...3.4 LownssDebianThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...2.6 LownssDebianThe ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13...5.0 MediumnssDebian** DISPUTED ** Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as...7.1 HighnssDebianThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 MediumnssDebiannss - compromised certificate authorityNo scorenssDebiannss - compromised certificate authorityNo scorenssDebiannss - security updateNo scorenssDebianThe SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird...7.5 HighnssDebianMozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before...4.3 MediumnssDebianApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 MediumnssDebianHeap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services ...9.3 HighnssDebianThe Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...5.1 MediumnssDebianMozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before...5.9 Medium