Lucene search

[email protected]CVE-2017-7502

HistoryMay 30, 2017 - 6:29 p.m.

CVE-2017-7502

2017-05-3018:29:00

CWE-476

[email protected]

web.nvd.nist.gov

120

cve-2017-7502

nss

null pointer dereference

dos

remote attacker

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%

JSON

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.

Affected configurations

Vulners

NVD

Node

nss_projectnssRange≤3.24.0

CPENameOperatorVersion
mozilla:network_security_servicesmozilla network security serviceseq3.24.0
mozilla:network_security_servicesmozilla network security serviceseq3.25.0
mozilla:network_security_servicesmozilla network security serviceseq3.25.1
mozilla:network_security_servicesmozilla network security serviceseq3.26.0
mozilla:network_security_servicesmozilla network security serviceseq3.26.2
mozilla:network_security_servicesmozilla network security serviceseq3.27.0
mozilla:network_security_servicesmozilla network security serviceseq3.27.1
mozilla:network_security_servicesmozilla network security serviceseq3.27.2
mozilla:network_security_servicesmozilla network security serviceseq3.28.0
mozilla:network_security_servicesmozilla network security serviceseq3.28.1

CPE	Name	Operator	Version
mozilla:network_security_services	mozilla network security services	eq	3.24.0
mozilla:network_security_services	mozilla network security services	eq	3.25.0
mozilla:network_security_services	mozilla network security services	eq	3.25.1
mozilla:network_security_services	mozilla network security services	eq	3.26.0
mozilla:network_security_services	mozilla network security services	eq	3.26.2
mozilla:network_security_services	mozilla network security services	eq	3.27.0
mozilla:network_security_services	mozilla network security services	eq	3.27.1
mozilla:network_security_services	mozilla network security services	eq	3.27.2
mozilla:network_security_services	mozilla network security services	eq	3.28.0
mozilla:network_security_services	mozilla network security services	eq	3.28.1

Rows per page:

1-10 of 181

CNA Affected

[
  {
    "product": "nss",
    "vendor": "NSS project",
    "versions": [
      {
        "status": "affected",
        "version": "since 3.24.0"
      }
    ]
  }
]