p PatchFirst

CVE-2015-7183

CVE-2015-7183

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

EPSS 6.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nspr Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:4.10.10-1

    Update to 2:4.10.10-1

  • nspr Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:4.10.10-1

    Update to 2:4.10.10-1

  • nspr Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:4.10.10-1

    Update to 2:4.10.10-1

  • firefox Ubuntu:14.04:LTS

    Versions
    • 24.0+build1-0ubuntu1
    • 25.0+build3-0ubuntu0.13.10.1
    • 28.0~b2+build1-0ubuntu2
    • 28.0+build1-0ubuntu1
    • 28.0+build2-0ubuntu1
    • 28.0+build2-0ubuntu2
    • 29.0+build1-0ubuntu0.14.04.2
    • 30.0+build1-0ubuntu0.14.04.3
    • 31.0+build1-0ubuntu0.14.04.1
    • 32.0+build1-0ubuntu0.14.04.1
    • 32.0.3+build1-0ubuntu0.14.04.1
    • 33.0+build2-0ubuntu0.14.04.1
    • 34.0+build2-0ubuntu0.14.04.1
    • 35.0+build3-0ubuntu0.14.04.2
    • 35.0.1+build1-0ubuntu0.14.04.1
    • 36.0+build2-0ubuntu0.14.04.4
    • 36.0.1+build2-0ubuntu0.14.04.1
    • 36.0.4+build1-0ubuntu0.14.04.1
    • 37.0+build2-0ubuntu0.14.04.1
    • 37.0.1+build1-0ubuntu0.14.04.1
    • 37.0.2+build1-0ubuntu0.14.04.1
    • 38.0+build3-0ubuntu0.14.04.1
    • 39.0+build5-0ubuntu0.14.04.1
    • 39.0.3+build2-0ubuntu0.14.04.1
    • 40.0+build4-0ubuntu0.14.04.1
    • 40.0+build4-0ubuntu0.14.04.4
    • 40.0.3+build1-0ubuntu0.14.04.1
    • 41.0+build3-0ubuntu0.14.04.1
    • 41.0.1+build2-0ubuntu0.14.04.1
    • 41.0.2+build2-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 42.0+build2-0ubuntu0.14.04.1

    Update to 42.0+build2-0ubuntu0.14.04.1

  • nspr Ubuntu:14.04:LTS

    Versions
    • 2:4.9.5-1ubuntu1
    • 2:4.9.5-1ubuntu2
    • 2:4.10.2-1ubuntu1
    • 2:4.10.2-1ubuntu1.1
    • 2:4.10.7-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 2:4.10.10-0ubuntu0.14.04.1

    Update to 2:4.10.10-0ubuntu0.14.04.1

  • thunderbird Ubuntu:14.04:LTS

    Versions
    • 1:24.0+build1-0ubuntu1
    • 1:24.0+build1-0ubuntu2
    • 1:24.1.1+build1-0ubuntu0.13.10.1
    • 1:24.1.1+build1-0ubuntu1
    • 1:24.2.0+build1-0ubuntu1
    • 1:24.4.0+build1-0ubuntu1
    • 1:24.5.0+build1-0ubuntu0.14.04.1
    • 1:24.6.0+build1-0ubuntu0.14.04.1
    • 1:31.0+build1-0ubuntu0.14.04.1
    • 1:31.1.1+build1-0ubuntu0.14.04.1
    • 1:31.1.2+build1-0ubuntu0.14.04.1
    • 1:31.2.0+build2-0ubuntu0.14.04.1
    • 1:31.3.0+build1-0ubuntu0.14.04.1
    • 1:31.4.0+build1-0ubuntu0.14.04.1
    • 1:31.5.0+build1-0ubuntu0.14.04.1
    • 1:31.6.0+build1-0ubuntu0.14.04.1
    • 1:31.7.0+build1-0ubuntu0.14.04.1
    • 1:31.8.0+build1-0ubuntu0.14.04.1
    • 1:38.2.0+build1-0ubuntu0.14.04.1
    • 1:38.3.0+build1-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 1:38.4.0+build3-0ubuntu0.14.04.1

    Update to 1:38.4.0+build3-0ubuntu0.14.04.1

  • virtualbox Ubuntu:14.04:LTS

    Versions
    • 4.2.16-dfsg-3
    • 4.2.16-dfsg-3ubuntu1
    • 4.3.2-dfsg-1
    • 4.3.2-dfsg-1ubuntu1
    • 4.3.2-dfsg-1ubuntu2
    • 4.3.6-dfsg-1
    • 4.3.6-dfsg-2
    • 4.3.10-dfsg-1
    • 4.3.10-dfsg-1ubuntu1
    • 4.3.10-dfsg-1ubuntu2
    • 4.3.10-dfsg-1ubuntu3
    • 4.3.10-dfsg-1ubuntu4
    • 4.3.10-dfsg-1ubuntu5
    • 4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1
    Affected ranges
    • ECOSYSTEM: < 4.3.36-dfsg-1+deb8u1ubuntu1.14.04.1

    Update to 4.3.36-dfsg-1+deb8u1ubuntu1.14.04.1

  • firefox Ubuntu:16.04:LTS

    Versions
    • 41.0.2+build2-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 42.0+build2-0ubuntu1

    Update to 42.0+build2-0ubuntu1

Original sources

Check your server →