Lucene search
Mozilla FoundationMFSA2014-18HistoryMar 18, 2014 - 12:00 a.m.
crypto.generateCRMFRequest does not validate type of key — Mozilla
2014-03-1800:00:00
Mozilla Foundation
www.mozilla.org
18
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.029 Low
EPSS
Percentile
90.9%
Mozilla developer David Keeler reported that the crypto.generateCRFMRequest method did not correctly validate the key type of the KeyParams argument when generating ec-dual-use requests. This could lead to a crash and a denial of service (DOS) attack.
Affected configurations
Node
mozillafirefoxRange<28
ORmozillaseamonkeyRange<2.25
Related
prion
prion
Design/Logic Flaw
2014-03-19 10:55:00
cvelist
cvelist
CVE-2014-1498
2014-03-19 10:00:00
seebug
seebug
Mozilla多个产品crypto.generateCRMFRequest拒绝服务漏洞
2014-03-21 00:00:00
cve
cve
CVE-2014-1498
2014-03-19 10:55:06
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-18) - Linux
2021-11-11 00:00:00
SuSE Update for MozillaThunderbird,seamonkey openSUSE-SU-2014:0584-1 (MozillaThunderbird,seamonkey)
2014-05-05 00:00:00
Ubuntu: Security Advisory (USN-2150-1)
2014-03-20 00:00:00
nvd
nvd
CVE-2014-1498
2014-03-19 10:55:06
ubuntucve
ubuntucve
CVE-2014-1498
2014-03-18 00:00:00
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.10 : firefox vulnerabilities (USN-2150-1)
2014-03-19 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:0448-1)
2014-06-13 00:00:00
SeaMonkey < 2.25 Multiple Vulnerabilities
2014-03-19 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2014-03-18 00:00:00
suse
suse
MozillaThunderbird,seamonkey (important)
2014-04-30 09:04:15
MozillaFirefox: Update to version 28.0 (important)
2014-03-26 17:04:14
Security update for MozillaFirefox (important)
2014-03-21 23:04:18
mageia
mageia
Updated iceape packages fix multiple vulnerabilities
2014-03-31 23:47:52
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-03-19 00:00:00
securityvulns
securityvulns
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.029 Low
EPSS
Percentile
90.9%
Related for MFSA2014-18