PT-2013-5675 · Mozilla+4 · Network Security Services+4

Amtinits · Publicado 2013-11-15 · Atualizado 2024-06-15 · CVE-2013-5605

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services (NSS) versions 3.14 before 3.14.5 Mozilla Network Security Services (NSS) versions 3.15 before 3.15.3

Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.

Recommendations For Mozilla Network Security Services (NSS) versions 3.14 before 3.14.5, update to version 3.14.5 or later. For Mozilla Network Security Services (NSS) versions 3.15 before 3.15.3, update to version 3.15.3 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2013-1148

CESA-2013_1829

CVE-2013-5605

DSA-2800-1

MGASA-2013-0337

OPENSUSE-SU-2024:10451-1

RHSA-2013:1791

RHSA-2013:1829

RHSA-2013:1840

RHSA-2013:1841

RHSA-2013_1791

RHSA-2013_1829

RHSA-2014:0041

Produtos afetados

Alt Linux

Centos

Network Security Services

Red Hat

Suse

Referências · 92

• https://bdu.fstec.ru/vul/2015-02928 · Nota de Segurança
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00078.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-7575 · Nota
• https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.3_release_notes · Nota
• https://suse.com/security/cve/CVE-2014-1490 · Nota
• https://developer.mozilla.org/docs/NSS/NSS_3.15.3_release_notes · Correção
• http://rhn.redhat.com/errata/RHSA-2013-1841.html · Aviso do Fabricante
• https://bugzilla.mozilla.org/show_bug.cgi?id=934016 · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-December/082233.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-December/056988.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5606 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2013-December/069544.html · Nota
• http://rhn.redhat.com/errata/RHSA-2013-1829.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2013-5607 · Nota