Denial Of Service (DoS)

2019-01-1509:17:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.04 Low

EPSS

Percentile

92.1%

JSON

nss is vulnerable to denial of service (DoS) attacks. The vulnerability exists as a null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.

CPENameOperatorVersion
nsseq3.15.1__15.el6
nsseq3.12.8__1.el6_0
nsseq3.13.3__6.el6
nsseq3.13.3__8.el6
nsseq3.15.3__3.el6_5
nsseq3.14.3__4.el6_4
nsseq3.16.1__7.el6_5
nsseq3.19.1__3.el6_6
nsseq3.14.0.0__12.el6
nsseq3.16.1__4.el6_5

Name	Operator	Version
nss	eq	3.15.1__15.el6
nss	eq	3.12.8__1.el6_0
nss	eq	3.13.3__6.el6
nss	eq	3.13.3__8.el6
nss	eq	3.15.3__3.el6_5
nss	eq	3.14.3__4.el6_4
nss	eq	3.16.1__7.el6_5
nss	eq	3.19.1__3.el6_6
nss	eq	3.14.0.0__12.el6
nss	eq	3.16.1__4.el6_5