PT-2017-17775 · Mozilla+4 · Network Security Services+4

Publicado

2017-05-30

·

Atualizado

2023-02-12

·

CVE-2017-7502

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Network Security Services (NSS) versions 3.24.0 and later
Description A null pointer dereference issue was discovered in NSS when the server receives empty SSLv2 messages, potentially leading to a denial of service by a remote attacker.
Recommendations For NSS versions 3.24.0 and later, consider disabling SSLv2 support as a temporary workaround until a patch is available.

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2017-1885
CESA-2017_1364
CESA-2017_1365
CVE-2017-7502
DLA-971-1
DSA-3872-1
MGASA-2017-0160
RHSA-2017:1364
RHSA-2017:1365
RHSA-2017_1364
RHSA-2017_1365
USN-3336-1
USN-3372-1

Produtos afetados

Alt Linux
Centos
Network Security Services
Red Hat
Ubuntu