Lucene search
Veracode Vulnerability DatabaseVERACODE:12030HistoryJan 15, 2019 - 9:11 a.m.
Denial Of Service (DoS)
2019-01-1509:11:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.077 Low
EPSS
Percentile
94.2%
nss is vulnerable to denial of service (DoS) attacks. The vulnerability exists as a use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption.
Related
mozilla
mozilla
Use-after-free in NSS during SSL connections in low memory — Mozilla
2016-01-26 00:00:00
f5
f5
ubuntucve
ubuntucve
CVE-2016-1978
2016-03-13 00:00:00
ibm
ibm
prion
prion
Design/Logic Flaw
2016-03-13 18:59:00
cve
cve
CVE-2016-1978
2016-03-13 18:59:27
cvelist
cvelist
CVE-2016-1978
2016-03-13 18:00:00
debiancve
debiancve
CVE-2016-1978
2016-03-13 18:59:27
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2016-15) - Linux
2021-11-08 00:00:00
CentOS Update for nss-softokn CESA-2016:0685 centos7
2016-04-26 00:00:00
Oracle: Security Advisory (ELSA-2016-0684)
2016-05-09 00:00:00
nvd
nvd
CVE-2016-1978
2016-03-13 18:59:27
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2016-04-25 00:00:00
nss, nss-util, and nspr security, bug fix, and enhancement update
2016-04-05 00:00:00
centos
centos
nspr, nss security update
2016-04-25 13:19:01
nspr, nss security update
2016-04-05 12:27:24
nspr, nss security update
2016-04-25 17:49:11
nessus
nessus
Oracle Linux 6 : nspr / nss / nss-util (ELSA-2016-0591)
2016-04-07 00:00:00
Amazon Linux AMI : nspr / nss-util,nss,nss-softokn (ALAS-2016-702)
2016-05-19 00:00:00
redhat
redhat
amazon
amazon
Medium: nspr, nss-util, nss, nss-softokn
2016-05-18 14:00:00
symantec
symantec
SA124 : NSS Vulnerabilities March 2016
2016-06-07 08:00:00
freebsd
freebsd
NSS -- multiple vulnerabilities
2016-01-26 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2016-05-19 00:00:00
osv
osv
nss - security update
2016-05-18 00:00:00
nss - security update
2016-10-05 00:00:00
debian
debian
[SECURITY] [DLA 480-1] nss security update
2016-05-18 18:34:37
[SECURITY] [DSA 3688-1] nss security update
2016-10-05 20:20:43
suse
suse
Security update for MozillaFirefox (important)
2016-03-18 18:12:42
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2016-03-30 15:07:52
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2016-03-11 20:11:56
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2016-05-31 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00