Mozilla Network Security Services vulnerabilities

• mozilla nss, network security services +1 more A vulnerability found in nss. By this security vulnerability, nss client auth crash without a... CVE-2022-3479 Fix available 7.5 HighOctober 14, 2022
• mozilla nss, fedoraproject fedora, mozilla network security services +4 more +6 more A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw... CVE-2020-25648 Fix available 7.5 HighOctober 20, 2020
• mozilla network security services, nss, netapp hci compute node +11 more +13 more In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing... CVE-2019-17006 Fix available 9.8 CriticalDecember 30, 2019
• mozilla network security services, nss, siemens ruggedcom rox mx5000 firmware +7 more +9 more In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... CVE-2019-17007 Fix available 7.5 HighNovember 29, 2019
• mozilla network security services, nss, siemens ruggedcom rox mx5000 firmware +7 more +9 more In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can... CVE-2018-18508 Fix available 6.5 MediumDecember 31, 2018
• mozilla network security services (nss), network security services +1 more A cached side channel attack during handshakes using RSA encryption could allow for the... CVE-2018-12404 Fix available EPSS 44.2% 5.9 MediumDecember 12, 2018
• mozilla network security services (nss), network security services +1 more When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random... CVE-2018-12384 Fix available 5.9 MediumSeptember 4, 2018
• mozilla network security services Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network... CVE-2017-11698 7.8 HighDecember 27, 2017
• mozilla network security services The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context... CVE-2017-11697 7.8 HighDecember 27, 2017
• mozilla network security services Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network... CVE-2017-11696 7.8 HighDecember 27, 2017
• mozilla network security services Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network... CVE-2017-11695 7.8 HighDecember 27, 2017
• mozilla nss, network security services +1 more Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty... CVE-2017-7502 Fix available 7.5 HighMay 30, 2017
• [unknown] nss, mozilla network security services +1 more nss before version 3.30 is vulnerable to a remote denial of service during the session handshake... CVE-2016-9574 Fix available 5.9 MediumMay 4, 2017
• mozilla firefox, firefox esr, network security services +2 more +4 more A flaw in DRBG number generation within the Network Security Services (NSS) library where the... CVE-2017-5462 Fix available 5.3 MediumApril 20, 2017
• mozilla network security services, firefox, firefox esr +1 more +3 more Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29... CVE-2017-5461 Fix available 9.8 CriticalApril 20, 2017
• mozilla nss, network security services, redhat enterprise linux desktop +5 more +7 more It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to... CVE-2016-8635 Fix available 5.3 MediumNovember 17, 2016
• mozilla firefox, network security services, canonical ubuntu linux +5 more +7 more Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,... CVE-2016-2834 Fix available 8.8 HighJune 8, 2016
• mozilla firefox, network security services +1 more Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network... CVE-2016-1978 Fix available 7.3 HighMarch 11, 2016
• mozilla firefox, network security services +1 more Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla... CVE-2016-1979 Fix available 8.8 HighMarch 9, 2016
• mozilla firefox, network security services, apple iphone os +9 more +11 more Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x... CVE-2016-1950 Fix available 8.8 HighMarch 8, 2016
• mozilla firefox, network security services, canonical ubuntu linux +2 more +4 more Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2... CVE-2015-7575 Fix available 5.9 MediumDecember 31, 2015
• mozilla firefox, network security services +1 more Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in... CVE-2015-7183 Fix available 7.5 HighNovember 4, 2015
• mozilla firefox, network security services, oracle glassfish server +4 more +6 more Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before... CVE-2015-7182 Fix available EPSS 10.2% 9.8 CriticalNovember 4, 2015
• mozilla firefox, network security services +1 more The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and... CVE-2015-7181 Fix available 7.5 HighNovember 4, 2015
• mozilla network security services, debian linux, novell suse linux enterprise desktop +4 more +6 more Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0,... CVE-2015-2730 Fix available 4.3 MediumJuly 5, 2015
• mozilla network security services, canonical ubuntu linux, debian linux +5 more +7 more Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,... CVE-2015-2721 Fix available 4.3 MediumJuly 4, 2015
• mozilla network security services The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ... CVE-2014-1569 Fix available 7.5 HighDecember 3, 2014
• google chrome, mozilla firefox, firefox esr +3 more +5 more Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before... CVE-2014-1568 Fix available EPSS 16.7% 7.5 HighSeptember 24, 2014
• mozilla firefox, firefox esr, network security services +1 more +3 more Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla... CVE-2014-1544 Fix available 10.0 HighJuly 22, 2014
• mozilla network security services The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation... CVE-2014-1492 Fix available 4.3 MediumMarch 20, 2014
• mozilla firefox, network security services, seamonkey +10 more +12 more Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,... CVE-2014-1491 Fix available 4.3 MediumFebruary 6, 2014
• mozilla firefox, network security services, seamonkey +10 more +12 more Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in... CVE-2014-1490 Fix available 9.3 HighFebruary 6, 2014
• mozilla network security services The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS... CVE-2013-1740 Fix available 5.8 MediumJanuary 18, 2014
• mozilla network security services The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS)... CVE-2013-5606 Fix available 5.8 MediumNovember 16, 2013
• mozilla network security services Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote... CVE-2013-5605 Fix available 7.5 HighNovember 16, 2013
• mozilla network security services Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote... CVE-2013-1741 Fix available 7.5 HighNovember 16, 2013
• mozilla network security services Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are... CVE-2013-1739 Fix available 5.0 MediumOctober 22, 2013
• mozilla firefox, network security services, seamonkey +9 more +11 more The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in... CVE-2013-0791 Fix available 5.0 MediumApril 3, 2013
• mozilla network security services, canonical ubuntu linux, oracle enterprise manager ops center +12 more +14 more The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider... CVE-2013-1620 Fix available 4.3 MediumFebruary 8, 2013
• apple iphone os, mac os x, safari +21 more +23 more The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on... CVE-2015-4000 Public exploitFix available EPSS 99.9% 3.7 LowAugust 30, 2012
• mozilla network security services ** DISPUTED ** Mozilla Network Security Services (NSS) 3.x, with certain settings of the... CVE-2011-5094 Disputed 4.3 MediumJune 16, 2012
• mozilla firefox, network security services, seamonkey +2 more +4 more The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13... CVE-2012-0441 Fix available 5.0 MediumJune 5, 2012
• mozilla network security services Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services ... CVE-2009-2404 Fix available 9.3 HighAugust 3, 2009
• gnu gnutls, mozilla network security services, openssl +2 more The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6... CVE-2009-2409 Fix available 5.1 MediumJuly 30, 2009
• mozilla firefox, network security services, seamonkey +6 more +8 more Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before... CVE-2009-2408 Fix available 5.9 MediumJuly 30, 2009
• mozilla firefox, network security services, seamonkey +3 more +5 more Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS)... CVE-2007-0009 EPSS 50.6% 6.8 MediumFebruary 26, 2007
• mozilla firefox, network security services, seamonkey +1 more +3 more Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5,... CVE-2007-0008 6.8 MediumFebruary 26, 2007
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1... CVE-2006-5462 Fix available 6.4 MediumNovember 8, 2006
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1... CVE-2006-4340 Fix available 4.0 MediumSeptember 15, 2006
• mozilla network security services, hp hp-ux, netscape certificate server +7 more +9 more Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote... CVE-2004-0826 EPSS 22.5% 7.5 HighSeptember 2, 2004