Non notée
CVE-2019-17006 In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks
Description
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| nss 3.46 | premières → < 3.46 | 3.46 |
Références
- developer.mozilla.org developer.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- security.netapp.com security.netapp.com
- cert-portal.siemens.com cert-portal.siemens.com
- us-cert.cisa.gov us-cert.cisa.gov
Chronologie
- Publiée
- Dernière modification
Autres CVE de nss
Les 6 CVE de nss →
CVE-2023-4421
The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks
Non notée
CVE-2021-43527
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling…
Non notée
CVE-2019-17007
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in…
Non notée
CVE-2018-18508
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a…
Non notée