PT-2016-2193 · Mozilla+5 · Firefox+6

Jed Davis + 1 · Published 2016-02-11 · Updated 2024-12-12 · CVE-2016-2834

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services (NSS) versions prior to 3.23 Mozilla Firefox versions prior to 47.0

Description The issue is related to errors in the code of the Network Security Services library and the Firefox browser. It may allow a remote attacker to cause a denial of service, such as memory corruption and application crash, or have other unspecified impacts.

Recommendations For Mozilla Network Security Services (NSS) versions prior to 3.23, update to version 3.23 or later. For Mozilla Firefox versions prior to 47.0, update to version 47.0 or later.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2016-1092

ALT-PU-2016-1630

ALT-PU-2017-1578

BDU:2016-01546

CESA-2016_2779

CVE-2016-2834

DLA-527-1

DSA-3688-1

OPENSUSE-SU-2016_1552-1

OPENSUSE-SU-2016_1557-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:10451-1

OPENSUSE-SU-2024:14572-1

RHSA-2016:2779

RHSA-2016_2779

SUSE-SU-2016:1691-1

SUSE-SU-2016:1799-1

SUSE-SU-2016:2061-1

SUSE-SU-2017:1175-1

SUSE-SU-2017:1248-1

USN-2993-1

USN-3029-1

Affected Products

Alt Linux

Centos

Firefox

Network Security Services

Red Hat

Suse

Ubuntu

References · 2144

• https://osv.dev/vulnerability/USN-3029-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-2834 · Vendor Advisory
• http://mozilla.org/security/announce/2016/mfsa2016-61.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-2834 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2818 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2822 · Vendor Advisory
• http://debian.org/security/2016/dsa-3688 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2819 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-2834 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2831 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2828 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html · Vendor Advisory