Описание
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.
A use-after-poison flaw was found in the way NSS parsed certain ASN.1 structures. An attacker could use this flaw to cause NSS to crash or execute arbitrary code with the permissions of the user running an application compiled against the NSS library.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 4 | nss | Will not fix | ||
| Red Hat Enterprise Linux 5 | nspr | Fixed | RHSA-2015:1980 | 04.11.2015 |
| Red Hat Enterprise Linux 5 | nss | Fixed | RHSA-2015:1980 | 04.11.2015 |
| Red Hat Enterprise Linux 6 | nspr | Fixed | RHSA-2015:1981 | 04.11.2015 |
| Red Hat Enterprise Linux 6 | nss | Fixed | RHSA-2015:1981 | 04.11.2015 |
| Red Hat Enterprise Linux 6 | nss-util | Fixed | RHSA-2015:1981 | 04.11.2015 |
| Red Hat Enterprise Linux 6.2 Advanced Update Support | nspr | Fixed | RHSA-2015:2068 | 18.11.2015 |
| Red Hat Enterprise Linux 6.2 Advanced Update Support | nss | Fixed | RHSA-2015:2068 | 18.11.2015 |
| Red Hat Enterprise Linux 6.2 Advanced Update Support | nss-util | Fixed | RHSA-2015:2068 | 18.11.2015 |
| Red Hat Enterprise Linux 6.4 Advanced Update Support | nspr | Fixed | RHSA-2015:2068 | 18.11.2015 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.8 Medium
CVSS2
Связанные уязвимости
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.
The sec_asn1d_parse_leaf function in Mozilla Network Security Services ...
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
EPSS
6.8 Medium
CVSS2