Not rated
CVE-2019-17006 In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks
Description
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| nss 3.46 | earliest → < 3.46 | 3.46 |
References
- developer.mozilla.org developer.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- security.netapp.com security.netapp.com
- cert-portal.siemens.com cert-portal.siemens.com
- us-cert.cisa.gov us-cert.cisa.gov
Timeline
- Published
- Last modified
Other CVEs of nss
The 6 CVEs of nss →
CVE-2023-4421
The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks
Not rated
CVE-2021-43527
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling…
Not rated
CVE-2019-17007
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in…
Not rated
CVE-2018-18508
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a…
Not rated