PT-2013-5675 · Mozilla+4 · Network Security Services+4

Amtinits · Published 2013-11-15 · Updated 2024-06-15 · CVE-2013-5605

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services (NSS) versions 3.14 before 3.14.5 Mozilla Network Security Services (NSS) versions 3.15 before 3.15.3

Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.

Recommendations For Mozilla Network Security Services (NSS) versions 3.14 before 3.14.5, update to version 3.14.5 or later. For Mozilla Network Security Services (NSS) versions 3.15 before 3.15.3, update to version 3.15.3 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2013-1148

CESA-2013_1829

CVE-2013-5605

DSA-2800-1

MGASA-2013-0337

OPENSUSE-SU-2024:10451-1

RHSA-2013:1791

RHSA-2013:1829

RHSA-2013:1840

RHSA-2013:1841

RHSA-2013_1791

RHSA-2013_1829

RHSA-2014:0041

Affected Products

Alt Linux

Centos

Network Security Services

Red Hat

Suse

References · 92

• https://bdu.fstec.ru/vul/2015-02928 · Security Note
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00078.html · Vendor Advisory
• https://developer.mozilla.org/docs/NSS/NSS_3.15.3_release_notes · Patch
• http://rhn.redhat.com/errata/RHSA-2013-1841.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5606 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1829.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html · Vendor Advisory
• https://developer.mozilla.org/docs/NSS/NSS_3.14.5_release_notes · Patch
• https://osv.dev/vulnerability/MGASA-2013-0337 · Vendor Advisory
• http://debian.org/security/2013/dsa-2800 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-5605 · Vendor Advisory
• http://ubuntu.com/usn/USN-2032-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10451-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-5605 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2013-103 · Vendor Advisory