Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-2730

Опубликовано: 06 июл. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3

Описание

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

РелизСтатусПримечание
devel

released

39.0+build5-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [39.0+build5-0ubuntu0.14.04.1]]
precise

released

39.0+build5-0ubuntu0.12.04.2
trusty

released

39.0+build5-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [39.0+build5-0ubuntu0.14.04.1]
upstream

released

39.0
utopic

released

39.0+build5-0ubuntu0.14.10.1
vivid

released

39.0+build5-0ubuntu0.15.04.1

Показывать по

РелизСтатусПримечание
devel

released

2:3.19.2-1ubuntu1
esm-infra-legacy/trusty

released

2:3.19.2-0ubuntu0.14.04.1
precise

released

3.19.2-0ubuntu0.12.04.1
trusty

released

2:3.19.2-0ubuntu0.14.04.1
trusty/esm

released

2:3.19.2-0ubuntu0.14.04.1
upstream

released

2:3.19.1-1
utopic

released

2:3.19.2-0ubuntu0.14.10.1
vivid

released

2:3.19.2-0ubuntu15.04.1
vivid/stable-phone-overlay

released

2:3.19.2-0ubuntu15.04.1
vivid/ubuntu-core

DNE

Показывать по

РелизСтатусПримечание
devel

released

1:31.8.0+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:31.8.0+build1-0ubuntu0.14.04.1]]
precise

released

1:31.8.0+build1-0ubuntu0.12.04.1
trusty

released

1:31.8.0+build1-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1:31.8.0+build1-0ubuntu0.14.04.1]
upstream

released

31.8
utopic

released

1:31.8.0+build1-0ubuntu0.14.10.1
vivid

released

1:31.8.0+build1-0ubuntu0.15.04.1

Показывать по

EPSS

Процентиль: 56%
0.0034
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

redhat
около 10 лет назад

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

nvd
около 10 лет назад

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

debian
около 10 лет назад

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozi ...

github
больше 3 лет назад

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

oracle-oval
почти 10 лет назад

ELSA-2015-1699: nss-softokn security update (MODERATE)

EPSS

Процентиль: 56%
0.0034
Низкий

4.3 Medium

CVSS2