Описание
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | nss | Will not fix | ||
| Red Hat Enterprise Linux 6 | nss | Will not fix | ||
| Red Hat Enterprise Linux 7 | nss | Will not fix |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-325
https://bugzilla.redhat.com/show_bug.cgi?id=1404568nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Связанные уязвимости
CVSS3: 5.9
ubuntu
больше 7 лет назад
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
CVSS3: 5.9
nvd
больше 7 лет назад
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
CVSS3: 5.9
debian
больше 7 лет назад
nss before version 3.30 is vulnerable to a remote denial of service du ...
CVSS3: 5.9
github
больше 3 лет назад
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
5.9 Medium
CVSS3
4.3 Medium
CVSS2