PT-2022-22341 · Mozilla+4 · Nss+4

Sandipan Roy · Published 2022-09-06 · Updated 2024-03-01 · CVE-2022-3479

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions nss (affected versions not specified)

Description A security issue in nss can cause the client authentication to crash when there is no user certificate in the database, potentially leading to a segmentation fault or crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

ALT-PU-2022-2572

ALT-PU-2022-2928

ALT-PU-2023-1136

ALT-PU-2023-4338

CVE-2022-3479

MGASA-2023-0018

OESA-2024-1211

OESA-2024-1212

OESA-2024-1213

OESA-2024-1214

OPENSUSE-SU-2023_0119-1

SUSE-SU-2023:0118-1

SUSE-SU-2023:0119-1

SUSE-SU-2023:0130-1

USN-5892-1

Affected Products

Alt Linux

Linuxmint

Suse

Ubuntu

Nss

References · 40

• https://osv.dev/vulnerability/CVE-2022-3479 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1774654 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-3479 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0018.html · Security Note
• https://ubuntu.com/security/CVE-2022-3479 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1214 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1212 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2023-02 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0018 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0119-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0130-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3479 · Security Note
• https://ubuntu.com/security/CVE-2023-0767 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5892-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-3479 · Vendor Advisory