p PatchFirst

CVE-2014-1491

CVE-2014-1491

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.

EPSS 4.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nss Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:3.15.4-1

    Update to 2:3.15.4-1

  • nss Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:3.15.4-1

    Update to 2:3.15.4-1

  • nss Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:3.15.4-1

    Update to 2:3.15.4-1

Original sources

Check your server →