Vulnerability in Mozilla Network Security Services
CVE-2013-1739
Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.
EPSS: 0.034 (87.6th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Network_security_services — versions 3.12, 3.12.1, 3.12.2
- N/a — versions n/a
References
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
- security@mozilla.org (vendor-advisory, x_refsource_DEBIAN)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (mailing-list, x_refsource_BUGTRAQ)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (vendor-advisory, x_refsource_GENTOO)