CVE-2013-1739
CVE-2013-1739
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.
EPSS 3.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1012656
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.2_release_notes
- http://www.debian.org/security/2013/dsa-2790
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=894370
- http://security.gentoo.org/glsa/glsa-201406-19.xml
- http://www.ubuntu.com/usn/USN-2030-1
- http://www.mozilla.org/security/announce/2013/mfsa2013-93.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19254
- http://rhn.redhat.com/errata/RHSA-2013-1791.html
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00013.html
- http://www.securityfocus.com/bid/62966
- http://rhn.redhat.com/errata/RHSA-2013-1829.html
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00016.html
- https://nvd.nist.gov/vuln/detail/CVE-2013-1739