CVE-2013-1739

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html

http://lists.opensuse.org/opensuse-updates/2013-10/msg00013.html

http://lists.opensuse.org/opensuse-updates/2013-10/msg00016.html

http://rhn.redhat.com/errata/RHSA-2013-1791.html

http://rhn.redhat.com/errata/RHSA-2013-1829.html

http://seclists.org/fulldisclosure/2014/Dec/23

http://security.gentoo.org/glsa/glsa-201406-19.xml

http://www.debian.org/security/2013/dsa-2790

http://www.mozilla.org/security/announce/2013/mfsa2013-93.html

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.securityfocus.com/archive/1/534161/100/0/threaded

http://www.securityfocus.com/bid/62966

http://www.ubuntu.com/usn/USN-2030-1

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

https://bugzilla.mozilla.org/show_bug.cgi?id=894370

https://bugzilla.redhat.com/show_bug.cgi?id=1012656

https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.2_release_notes

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19254

Details

Source: MITRE

Published: 2013-10-22

Updated: 2018-10-09

Risk Information

CVSS v2

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

Tenable Plugins

View all (47 total)

IDNameProductFamilySeverity
701256Mozilla Firefox ESR < 24.1 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
critical
701239Mozilla Firefox ESR < 17.0.10 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
critical
127200NewStart CGSL CORE 5.04 / MAIN 5.04 : nss Multiple Vulnerabilities (NS-SA-2019-0033)NessusNewStart CGSL Local Security Checks
high
78774Oracle OpenSSO Agent Multiple Vulnerabilities (October 2014 CPU)NessusCGI abuses
high
78541Oracle WebLogic Server Multiple Vulnerabilities (October 2014 CPU)NessusMisc.
high
76938Oracle Traffic Director Multiple Vulnerabilities (July 2014 CPU)NessusMisc.
high
76593Oracle iPlanet Web Server 7.0.x < 7.0.20 Multiple VulnerabilitiesNessusWeb Servers
high
76592Oracle iPlanet Web Proxy Server 4.0 < 4.0.24 Multiple VulnerabilitiesNessusWindows
high
76591Oracle GlassFish Server Multiple Vulnerabilities (July 2014 CPU)NessusWeb Servers
high
76178GLSA-201406-19 : Mozilla Network Security Service: Multiple vulnerabilitiesNessusGentoo Local Security Checks
medium
75161openSUSE Security Update : mozilla-nss (openSUSE-SU-2013:1539-1)NessusSuSE Local Security Checks
medium
71578Amazon Linux AMI : nspr (ALAS-2013-266)NessusAmazon Linux Local Security Checks
high
71577Amazon Linux AMI : nss (ALAS-2013-265)NessusAmazon Linux Local Security Checks
high
71424Scientific Linux Security Update : nss, nspr, and nss-util on SL6.x i386/x86_64 (20131212)NessusScientific Linux Local Security Checks
high
71390RHEL 6 : nss, nspr, and nss-util (RHSA-2013:1829)NessusRed Hat Local Security Checks
high
71388Oracle Linux 6 : nspr / nss / nss-util (ELSA-2013-1829)NessusOracle Linux Local Security Checks
high
71380CentOS 6 : nspr / nss / nss-util (CESA-2013:1829)NessusCentOS Local Security Checks
high
71306Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20131205)NessusScientific Linux Local Security Checks
high
71243RHEL 5 : nss and nspr (RHSA-2013:1791)NessusRed Hat Local Security Checks
high
71241Oracle Linux 5 : nspr / nss (ELSA-2013-1791)NessusOracle Linux Local Security Checks
high
71237CentOS 5 : nspr / nss (CESA-2013:1791)NessusCentOS Local Security Checks
high
70998Mandriva Linux Security Advisory : nss (MDVSA-2013:270)NessusMandriva Local Security Checks
high
70962Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : nss vulnerabilities (USN-2030-1)NessusUbuntu Local Security Checks
high
70938SuSE 11.2 / 11.3 Security Update : Mozilla NSS (SAT Patch Numbers 8484 / 8485)NessusSuSE Local Security Checks
medium
70937SuSE 11.2 Security Update : Mozilla NSS (SAT Patch Number 8484)NessusSuSE Local Security Checks
medium
70935SuSE 11.2 Security Update : MozillaFirefox (SAT Patch Number 8545)NessusSuSE Local Security Checks
critical
70934SuSE 11.2 Security Update : MozillaFirefox (SAT Patch Number 8545)NessusSuSE Local Security Checks
critical
70933SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 8491)NessusSuSE Local Security Checks
critical
70737Debian DSA-2790-1 : nss - uninitialized memory readNessusDebian Local Security Checks
medium
70725Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : thunderbird vulnerabilities (USN-2010-1)NessusUbuntu Local Security Checks
critical
8046Mozilla Thunderbird < 24.1 Multiple VulnerabilitiesNessus Network MonitorSMTP Clients
critical
8045SeaMonkey < 2.22 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
critical
8044Mozilla Firefox < 25.0 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
critical
70719SeaMonkey < 2.22 Multiple VulnerabilitiesNessusWindows
critical
70718Mozilla Thunderbird < 24.1 Multiple VulnerabilitiesNessusWindows
critical
70717Mozilla Thunderbird ESR < 17.0.10 Multiple VulnerabilitiesNessusWindows
critical
70716Firefox < 25.0 Multiple VulnerabilitiesNessusWindows
critical
70715Firefox ESR 24.x < 24.1 Multiple VulnerabilitiesNessusWindows
critical
70714Firefox ESR < 17.0.10 Multiple VulnerabilitiesNessusWindows
critical
70713Thunderbird < 24.1 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
critical
70712Thunderbird ESR < 17.0.10 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
critical
70711Firefox < 25.0 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
critical
70710Firefox ESR 24.x < 24.1 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
critical
70709Firefox ESR < 17.0.10 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
critical
70701FreeBSD : mozilla -- multiple vulnerabilities (81f866ad-41a4-11e3-a4af-0025905a4771)NessusFreeBSD Local Security Checks
critical
70698Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : firefox vulnerabilities (USN-2009-1)NessusUbuntu Local Security Checks
critical
70573Mandriva Linux Security Advisory : nss (MDVSA-2013:257)NessusMandriva Local Security Checks
medium