The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.

The remote host is affected by the vulnerability described in GLSA-201701-46 (Mozilla Network Security Service (NSS): Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in NSS. Please review the       CVE identifiers and technical papers referenced below for details.
  Impact :

    Remote attackers could conduct man-in-the-middle attacks, obtain access       to private key information, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities were discovered in NSS, the cryptography library developed by the Mozilla project.

  - CVE-2015-4000     David Adrian et al. reported that it may be feasible to     attack Diffie-Hellman-based cipher suites in certain     circumstances, compromising the confidentiality and     integrity of data encrypted with Transport Layer     Security (TLS).

  - CVE-2015-7181 CVE-2015-7182 CVE-2016-1950     Tyson Smith, David Keeler, and Francis Gabriel     discovered heap-based buffer overflows in the ASN.1 DER     parser, potentially leading to arbitrary code execution.

  - CVE-2015-7575     Karthikeyan Bhargavan discovered that TLS client     implementation accepted MD5-based signatures for TLS 1.2     connections with forward secrecy, weakening the intended     security strength of TLS connections.

  - CVE-2016-1938     Hanno Boeck discovered that NSS miscomputed the result     of integer division for certain inputs. This could     weaken the cryptographic protections provided by NSS.
    However, NSS implements RSA-CRT leak hardening, so RSA     private keys are not directly disclosed by this issue.

  - CVE-2016-1978     Eric Rescorla discovered a use-after-free vulnerability     in the implementation of ECDH-based TLS handshakes, with     unknown consequences.

  - CVE-2016-1979     Tim Taubert discovered a use-after-free vulnerability in     ASN.1 DER processing, with application-specific impact.

  - CVE-2016-2834     Tyson Smith and Jed Davis discovered unspecified     memory-safety bugs in NSS.

In addition, the NSS library did not ignore environment variables in processes which underwent a SUID/SGID/AT_SECURE transition at process start. In certain system configurations, this allowed local users to escalate their privileges.

This update contains further correctness and stability fixes without immediate security impact.

The specific version of Firefox that the system is running is reportedly affected by the following vulnerabilities:

- Brotli contains a flaw in the DecodeVarLenUint8() function in dec/decode.c related to use of uninitialized memory. This may allow a context-dependent attacker to have an unspecified impact. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1930)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains an unspecified flaw that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor. (CVE-2016-1931)

- Mozilla Firefox contains a flaw in the Downscaler::ClearRow() function in image/Downscaler.cpp. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the nsComputedDOMStyle::GetStyleContextForElement() and nsComputedDOMStyle::GetStyleContextForElementNoFlush() functions in layout/style/nsComputedDOMStyle.cpp. The issue is triggered when using a frame that is not in the composed document. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw that is triggered when handling fuctions accepting rest parameters. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the CodeGeneratorShared::allocateData() function in js/src/jit/shared/CodeGenerator-shared.h that is triggered when handling out-of-memory error conditions. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the VCMGenericEncoder::Release() function in media/webrtc/trunk/webrtc/modules/video_coding/main/source/generic_encoder.cc. The issue is triggered as the encoded-frame callback is not unregistered when releasing codec databases. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains an unspecified flaw in js/src/vm/HelperThreads.cpp. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the JSRuntime::createJitRuntime() function in js/src/jscompartment.cpp that is triggered when handling out-of-memory error conditions. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains an unspecified flaw that is triggered when handling attribute changes. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the HTMLMediaElement::NotifyAddedSource() function in dom/html/HTMLMediaElement.cpp. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the nsGIFDecoder2::WriteInternal() function in image/decoders/nsGIFDecoder2.cpp that is triggered when handling GIF image frame bounds. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2016-1931)

- Mozilla Firefox contains a flaw that is triggered when handling WebAudio content. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a use-after-free condition in the nsLayoutUtils::SurfaceFromElement() function in dom/html/HTMLMediaElement.cpp. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2016-1930)

- Mozilla Firefox contains a flaw in the Evaluate() function in js/src/shell/js.cpp. With a specially crafted web page, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2016-1931)

- Mozilla Firefox contains an overflow condition in the WebGLContext::BufferData() function in dom/canvas/WebGLContextBuffers.cpp that is triggered when handling cache out-of-memory error conditions. This may allow a context-dependent attacker to cause a buffer overflow and potentially execute arbitrary code. (CVE-2016-1935)

- Mozilla Firefox contains a flaw in the BrowserApp::onTabChanged() function in mobile/android/base/java/org/mozilla/gecko/BrowserApp.java. The issue is triggered when handling page scrolling. This may allow a context-dependent attacker to spoof the location. (CVE-2016-1943)

- Mozilla Firefox contains an integer overflow condition that is triggered when handling GIF images. This may allow a context-dependent attacker to have an unspecified impact. No further details have been provided by the vendor. (CVE-2016-1933)

- Mozilla Firefox contains a flaw in the Buffer11::NativeBuffer11::map() function within the ANGLE implementation. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2016-1944)

- Mozilla Firefox for Android contains a flaw in mobile/android/chrome/content/browser.js that is triggered when handling data: URLs. This may allow a context-dependent attacker to spoof the location. (CVE-2016-1940)

- Mozilla Firefox contains a flaw in the safe browsing feature as the Application Reputation service was unreachable. This may allow a context-dependent attacker to trick a user into downloading a malicious executable without the user being warned. (CVE-2016-1947)

- Mozilla Firefox contains an integer overflow condition in the MoofParser::Metadata() function in media/libstagefright/binding/MoofParser.cpp. The issue is triggered when handling MP4 file metadata. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2016-1946)

- Mozilla Firefox contains a flaw in modules/libjar/nsZipArchive.cpp that is triggered when handling ZIP files. This may allow a context-dependent attacker to have an unspecified impact. (CVE-2016-1945)

- Mozilla Firefox contains a flaw in the nsCookieService::SetCookieInternal() function in netwerk/cookie/nsCookieService.cpp as control characters are permitted in cookie names. This may allow a context-dependent attacker to inject cookies. (CVE-2016-1939)

- Mozilla Network Security Services (NSS) contains an unspecified cryptographical issue when handling calculations that contain mp_div or mp_exptmod. This may allow an attacker to trigger potential cryptographic weaknesses. (CVE-2016-1938)

- Mozilla Firefox for Android contains a flaw in mobile/android/chrome/content/browser.js that is triggered as lightweight themes fail to properly secure connections when installing themes. This may allow a remote man-in-the-middle attacker to make changes to the theme.
 (CVE-2016-1948)

- Mozilla Firefox contains a flaw in the protocol handler in toolkit/mozapps/handling/content/dialog.js that is due to the handler treating double click events as two single click events. This may allow a context-dependent attacker to spoof content to cause a user to potentially perform malicious actions, such as downloading attacker controlled software. (CVE-2016-1937)

- Mozilla Firefox for Mac OS X contains a flaw that is triggered as the delay between the download dialog getting focus and the button getting enabled is too short. If a context-dependent attacker can trick a user into double clicking in a specific location, they can pass the second click through to a dialog below that location. This will allow the attacker to cause the user to perform unintentional actions. (CVE-2016-1941)

- Mozilla Firefox contains a flaw in browser/base/content/urlbarBindings.xml that is triggered during the handling of a URL that is invalid for the internal protocol, which will cause the URL to be pasted into the address bar. This may allow a context-dependent attacker to spoof URLs. (CVE-2016-1942)

- Mozilla Network Security Services (NSS) contains a use-after-free error in the ssl3_HandleECDHServerKeyExchange() function. The issue is triggered when handling failed allocations during DHE and ECDHE handshakes. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code. (CVE-2016-1978)

The remote host is affected by the vulnerability described in GLSA-201605-06 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Firefox, NSS, NSPR, and       Thunderbird. Please review the CVE identifiers referenced below for       details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information, spoof       the address bar, conduct clickjacking attacks, bypass security       restrictions and protection mechanisms, or have other unspecified       impacts.
  Workaround :

    There is no known workaround at this time.

Christian Holler, Tyson Smith, and Phil Ringalda discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-2805, CVE-2016-2807)

Hanno Bock discovered that calculations with mp_div and mp_exptmod in NSS produce incorrect results in some circumstances, resulting in cryptographic weaknesses. (CVE-2016-1938)

A use-after-free was discovered in ssl3_HandleECDHServerKeyExchange in NSS. A remote attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code.
(CVE-2016-1978)

A use-after-free was discovered in PK11_ImportDERPrivateKeyInfoAndReturnKey in NSS. A remote attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-1979).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This security update fixes serious security issues in NSS including arbitrary code execution and remote denial service attacks.

For Debian 7 'wheezy', these problems have been fixed in 3.14.5-1+deb7u6. We recommend you upgrade your nss packages as soon as possible.

CVE-2015-7181

The sec_asn1d_parse_leaf function improperly restricts access to an unspecified data structure.

CVE-2015-7182

Heap-based buffer overflow in the ASN.1 decoder.

CVE-2016-1938

The s_mp_div function in lib/freebl/mpi/mpi.c in improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms.

CVE-2016-1950

Heap-based buffer overflow allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.

CVE-2016-1978

Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption.

CVE-2016-1979

Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Mozilla Foundation reports :

Security researcher Hanno Bock reported that calculations with mp_div and mp_exptmod in Network Security Services (NSS) can produce wrong results in some circumstances. These functions are used within NSS for a variety of cryptographic division functions, leading to potential cryptographic weaknesses.

Mozilla developer Eric Rescorla reported that a failed allocation during DHE and ECDHE handshakes would lead to a use-after-free vulnerability.

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss fixes the following issues :

Firefox 38.6.1 ESR (bsc#967087)

The following vulnerabilities were fixed :

  - CVE-2016-1523: Fixed denial of service in Graphite 2     library (MFSA 2016-14/bmo#1246093)

Firefox 38.6.0 ESR + Mozilla NSS 3.20.2. (bsc#963520)

The following vulnerabilities were fixed :

  - CVE-2016-1930: Memory safety bugs fixed in Firefox ESR     38.6 (bsc#963632)

  - CVE-2016-1935: Buffer overflow in WebGL after out of     memory allocation (bsc#963635)

  - CVE-2016-1938: Calculations with mp_div and mp_exptmod     in Network Security Services (NSS) canproduce wrong     results (bsc#963731)

  - CVE-2015-7575: MD5 signatures accepted within TLS 1.2     ServerKeyExchange in server signature (bsc#959888)

The following improvements were added :

  - bsc#954447: Mozilla NSS now supports a number of new DHE     ciphersuites

  - Tracking protection is now enabled by default

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The s_mp_div function in Mozilla Network Security Services (NSS) before 3.21, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.

For the oldoldstable distribution (squeeze), these problem has been fixed in version 3.12.8-1+squeeze14.

We recommend that you upgrade your nss packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-2903-1 fixed a vulnerability in NSS. An incorrect package versioning change in Ubuntu 12.04 LTS caused a regression when building software against NSS. This update fixes the problem.

We apologize for the inconvenience.

Hanno Bock discovered that NSS incorrectly handled certain division functions, possibly leading to cryptographic weaknesses.
(CVE-2016-1938)

This update also refreshes the NSS package to version 3.21 which includes the latest CA certificate bundle, and removes the SPI CA.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Firefox is prior to 44.0 and is affected by multiple vulnerabilities : 

 - Multiple unspecified memory corruption issues exist that allow a remote attacker to execute arbitrary code. (CVE-2016-1930, CVE-2016-1931)
 - An integer overflow condition exists due to improper parsing of GIF images during deinterlacing. A remote attacker can exploit this, via a specially crafted GIF image, to cause a denial of service condition or the execution of arbitrary code. (CVE-2016-1933)
 - A buffer overflow condition exists in WebGL that is triggered when handling cache out-of-memory error conditions. A remote attacker can exploit this to execute arbitrary code. (CVE-2016-1935)
 - A content spoofing vulnerability exists due to the protocol handler dialog treating double click events as two single click events. A remote attacker can exploit this to spoof content, allowing the attacker to trick a user into performing malicious actions. (CVE-2016-1937)
 - A cryptographic weakness exists in Network Security Services (NSS) due to incorrect calculations with 'mp_div' and 'mp_exptmod'. (CVE-2016-1938)
 - A cookie injection vulnerability exists due to illegal control characters being permitted in cookie names. A remote attacker can exploit this to inject cookies. (CVE-2016-1939)
 - A flaw exists that is triggered as the delay between the download dialog getting focus and the button getting enabled is too short. If a context-dependent attacker can trick a user into double clicking in a specific location, they can pass the second click through to a dialog below that location. This will allow the attacker to cause the user to perform unintentional actions. (CVE-2016-1941)
 - An URL spoofing vulnerability exists due to a flaw that is triggered during the handling of a URL that invalid for the internal protocol, causing the URL to be pasted into the address bar. A remote attacker can exploit this spoof URLs, allowing the attacker to trick a user into visiting a malicious website. (CVE-2016-1942)
 - An unspecified memory corruption issue exists in the ANGLE graphics library implementation. A remote attacker can exploit this to corrupt memory, resulting in the execution of arbitrary code. (CVE-2016-1944)
 - A wild pointer flaw exists due to improper handling of ZIP files. A remote attacker can exploit this, via a crafted ZIP file, to have an unspecified impact. (CVE-2016-1945)
 - An integer overflow condition exists in the bundled version of libstagefright due to improper handling of MP4 file metadata. A remote attacker can exploit this to execute arbitrary code. (CVE-2016-1946)
 - A flaw exists in the safe browsing feature due to the Application Reputation service being unreachable. A remote attacker can exploit this to convince a user into downloading a malicious executable without being warned. (CVE-2016-1947)

Hanno Bock discovered that NSS incorrectly handled certain division functions, possibly leading to cryptographic weaknesses.
(CVE-2015-1938)

This update also refreshes the NSS package to version 3.21 which includes the latest CA certificate bundle, and removes the SPI CA.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-2880-1 fixed vulnerabilities in Firefox. This update introduced a regression which caused Firefox to crash on startup with some configurations. This update fixes the problem.

We apologize for the inconvenience.

Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, Randell Jesup, Nicolas Pierron, Eric Rescorla, Tyson Smith, and Gabor Krizsanits discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-1930, CVE-2016-1931)

Gustavo Grieco discovered an out-of-memory crash when loading GIF images in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to cause a denial of service.
(CVE-2016-1933)

Aki Helin discovered a buffer overflow when rendering WebGL content in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-1935)

It was discovered that a delay was missing when focusing the protocol handler dialog. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to conduct clickjacking attacks.
(CVE-2016-1937)

Hanno Bock discovered that calculations with mp_div and mp_exptmod in NSS produce incorrect results in some circumstances, resulting in cryptographic weaknesses.
(CVE-2016-1938)

Nicholas Hurley discovered that Firefox allows for control characters to be set in cookie names. An attacker could potentially exploit this to conduct cookie injection attacks on some web servers. (CVE-2016-1939)

It was discovered that when certain invalid URLs are pasted in to the addressbar, the addressbar contents may be manipulated to show the location of arbitrary websites. An attacker could potentially exploit this to conduct URL spoofing attacks. (CVE-2016-1942)

Ronald Crane discovered three vulnerabilities through code inspection. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-1944, CVE-2016-1945, CVE-2016-1946)

Francois Marier discovered that Application Reputation lookups didn't work correctly, disabling warnings for potentially malicious downloads. An attacker could potentially exploit this by tricking a user in to downloading a malicious file. Other parts of the Safe Browsing feature were unaffected by this. (CVE-2016-1947).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss fixes the following issues: (bsc#963520)

Mozilla Firefox was updated to 38.6.0 ESR. Mozilla NSS was updated to 3.20.2.

The following vulnerabilities were fixed :

  - CVE-2016-1930: Memory safety bugs fixed in Firefox ESR     38.6 (bsc#963632)

  - CVE-2016-1935: Buffer overflow in WebGL after out of     memory allocation (bsc#963635)

  - CVE-2016-1938: Calculations with mp_div and mp_exptmod     in Network Security Services (NSS) canproduce wrong     results (bsc#963731)

The following improvements were added :

  - bsc#954447: Mozilla NSS now supports a number of new DHE     ciphersuites

  - Tracking protection is now enabled by default

  - bsc#964332: Fixed leaking file descriptors inside FIPS     selfcheck code

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss fixes the following issues: (bsc#963520)

Mozilla Firefox was updated to 38.6.0 ESR. Mozilla NSS was updated to 3.20.2.

The following vulnerabilities were fixed :

  - CVE-2016-1930: Memory safety bugs fixed in Firefox ESR     38.6 (bsc#963632)

  - CVE-2016-1935: Buffer overflow in WebGL after out of     memory allocation (bsc#963635)

  - CVE-2016-1938: Calculations with mp_div and mp_exptmod     in Network Security Services (NSS) canproduce wrong     results (bsc#963731)

The following improvements were added :

  - bsc#954447: Mozilla NSS now supports a number of new DHE     ciphersuites

  - Tracking protection is now enabled by default

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes the following security related issues by updating packages to a more recent version :

Update of NSPR to 4.11 Update of NSS to 3.21 Update of Firefox to 44.0

  - MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 Miscellaneous     memory safety hazards

  - MFSA 2016-02/CVE-2016-1933 (bmo#1231761) Out of Memory     crash when parsing GIF format images

  - MFSA 2016-03/CVE-2016-1935 (bmo#1220450) Buffer overflow     in WebGL after out of memory allocation

  - MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423,     bmo#1233784) Firefox allows for control characters to be     set in cookie names

  - MFSA 2016-06/CVE-2016-1937 (bmo#724353) Missing delay     following user click events in protocol handler dialog

  - MFSA 2016-07/CVE-2016-1938 (bmo#1190248) Errors in     mp_div and mp_exptmod cryptographic functions in NSS     (fixed by requiring NSS 3.21)

  - MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082,     bmo#1228590) Addressbar spoofing attacks

  - MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946     (bmo#1186621, bmo#1214782, bmo#1232096) Unsafe memory     manipulation found through code inspection

  - MFSA 2016-11/CVE-2016-1947 (bmo#1237103) Application     Reputation service disabled in Firefox 43

This update to MozillaFirefox fixes several security issues and bugs.

Mozilla Firefox was updated to 44.0. Mozilla NSS was updated to 3.21 Mozilla NSPR was updated to 4.11.

The following vulnerabilities were fixed :

  - CVE-2016-1930/CVE-2016-1931: Miscellaneous memory safety     hazards (boo#963633)

  - CVE-2016-1933: Out of Memory crash when parsing GIF     format images (boo#963634)

  - CVE-2016-1935: Buffer overflow in WebGL after out of     memory allocation (boo#963635)

  - CVE-2015-7208/CVE-2016-1939: Firefox allows for control     characters to be set in cookie names (boo#963637)

  - CVE-2016-1937: Missing delay following user click events     in protocol handler dialog (boo#963641)

  - CVE-2016-1938: Errors in mp_div and mp_exptmod     cryptographic functions in NSS (boo#963731)

  - CVE-2016-1942/CVE-2016-1943: Addressbar spoofing attacks     (boo#963643)

  - CVE-2016-1944/CVE-2016-1945/CVE-2016-1946: Unsafe memory     manipulation found through code inspection (boo#963644)

  - CVE-2016-1947: Application Reputation service disabled     in Firefox 43 (boo#963645)

The following change from Mozilla Firefox 43.0.4 is included :

  - Re-enable SHA-1 certificates to prevent outdated     man-in-the-middle security devices from interfering with     properly secured SSL/TLS connections

The version of Firefox installed on the remote Windows host is prior to 44. It is, therefore, affected by the following vulnerabilities :

  - A cookie injection vulnerability exists due to illegal     control characters being stored as cookie values in     violation of RFC6265. A remote attacker can exploit this     to inject cookies. (CVE-2015-7208)

  - Multiple unspecified memory corruption issues exist that     allow a remote attacker to execute arbitrary code.
    (CVE-2016-1930, CVE-2016-1931)

  - An integer overflow condition exists due to improper     parsing of GIF images during deinterlacing. A remote     attacker can exploit this, via a specially crafted GIF     image, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2016-1933)

  - A buffer overflow condition exists in WebGL that is     triggered when handling cache out-of-memory error     conditions. A remote attacker can exploit this to     execute arbitrary code. (CVE-2016-1935)

  - A content spoofing vulnerability exists due to the     protocol handler dialog treating double click events as     two single click events. A remote attacker can exploit     this to spoof content, allowing the attacker to trick a     user into performing malicious actions. (CVE-2016-1937)

  - A cryptographic weakness exists in Network Security     Services (NSS) due to incorrect calculations with     'mp_div' and 'mp_exptmod'. (CVE-2016-1938)

  - A cookie injection vulnerability exists due to illegal     control characters being permitted in cookie names. A     remote attacker can exploit this to inject cookies.
    (CVE-2016-1939)

  - An URL spoofing vulnerability exists due to a flaw that     is triggered during the handling of a URL that invalid     for the internal protocol, causing the URL to be pasted     into the address bar. A remote attacker can exploit this     spoof URLs, allowing the attacker to trick a     user into visiting a malicious website. (CVE-2016-1942)

  - An unspecified memory corruption issue exists in the     ANGLE graphics library implementation. A remote attacker     can exploit this to corrupt memory, resulting in the     execution of arbitrary code. (CVE-2016-1944)

  - A wild pointer flaw exists due to improper handling of     ZIP files. A remote attacker can exploit this, via a     crafted ZIP file, to have an unspecified impact.
    (CVE-2016-1945)

  - An integer overflow condition exists in the bundled     version of libstagefright due to improper handling of     MP4 file metadata. A remote attacker can exploit this     to execute arbitrary code. (CVE-2016-1946)

  - A flaw exists in the safe browsing feature due to the     Application Reputation service being unreachable. A     remote attacker can exploit this to convince a user     into downloading a malicious executable without being     warned. (CVE-2016-1947)

  - A use-after-free error exists in Network Security     Services (NSS) due to improper handling of failed     allocations during DHE and ECDHE handshakes. An attacker     can exploit this to dereference already freed memory,     resulting in the execution of arbitrary code.
    (CVE-2016-1978)

The version of Firefox installed on the remote Mac OS X host is prior to 44. It is, therefore, affected by the following vulnerabilities :

  - A cookie injection vulnerability exists due to illegal     control characters being stored as cookie values in     violation of RFC6265. A remote attacker can exploit this     to inject cookies. (CVE-2015-7208)

  - Multiple unspecified memory corruption issues exist that     allow a remote attacker to execute arbitrary code.
    (CVE-2016-1930, CVE-2016-1931)

  - An integer overflow condition exists due to improper     parsing of GIF images during deinterlacing. A remote     attacker can exploit this, via a specially crafted GIF     image, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2016-1933)

  - A buffer overflow condition exists in WebGL that is     triggered when handling cache out-of-memory error     conditions. A remote attacker can exploit this to     execute arbitrary code. (CVE-2016-1935)

  - A content spoofing vulnerability exists due to the     protocol handler dialog treating double click events as     two single click events. A remote attacker can exploit     this to spoof content, allowing the attacker to trick a     user into performing malicious actions. (CVE-2016-1937)

  - A cryptographic weakness exists in Network Security     Services (NSS) due to incorrect calculations with     'mp_div' and 'mp_exptmod'. (CVE-2016-1938)

  - A cookie injection vulnerability exists due to illegal     control characters being permitted in cookie names. A     remote attacker can exploit this to inject cookies.
    (CVE-2016-1939)

  - An URL spoofing vulnerability exists due to a flaw that     is triggered during the handling of a URL that invalid     for the internal protocol, causing the URL to be pasted     into the address bar. A remote attacker can exploit this     spoof URLs, allowing the attacker to trick a     user into visiting a malicious website. (CVE-2016-1942)

  - An unspecified memory corruption issue exists in the     ANGLE graphics library implementation. A remote attacker     can exploit this to corrupt memory, resulting in the     execution of arbitrary code. (CVE-2016-1944)

  - A wild pointer flaw exists due to improper handling of     ZIP files. A remote attacker can exploit this, via a     crafted ZIP file, to have an unspecified impact.
    (CVE-2016-1945)

  - An integer overflow condition exists in the bundled     version of libstagefright due to improper handling of     MP4 file metadata. A remote attacker can exploit this     to execute arbitrary code. (CVE-2016-1946)

  - A flaw exists in the safe browsing feature due to the     Application Reputation service being unreachable. A     remote attacker can exploit this to convince a user     into downloading a malicious executable without being     warned. (CVE-2016-1947)

  - A use-after-free error exists in Network Security     Services (NSS) due to improper handling of failed     allocations during DHE and ECDHE handshakes. An attacker     can exploit this to dereference already freed memory,     resulting in the execution of arbitrary code.
    (CVE-2016-1978)

Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, Randell Jesup, Nicolas Pierron, Eric Rescorla, Tyson Smith, and Gabor Krizsanits discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-1930, CVE-2016-1931)

Gustavo Grieco discovered an out-of-memory crash when loading GIF images in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to cause a denial of service. (CVE-2016-1933)

Aki Helin discovered a buffer overflow when rendering WebGL content in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-1935)

It was discovered that a delay was missing when focusing the protocol handler dialog. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to conduct clickjacking attacks. (CVE-2016-1937)

Hanno Bock discovered that calculations with mp_div and mp_exptmod in NSS produce incorrect results in some circumstances, resulting in cryptographic weaknesses. (CVE-2016-1938)

Nicholas Hurley discovered that Firefox allows for control characters to be set in cookie names. An attacker could potentially exploit this to conduct cookie injection attacks on some web servers.
(CVE-2016-1939)

It was discovered that when certain invalid URLs are pasted in to the addressbar, the addressbar contents may be manipulated to show the location of arbitrary websites. An attacker could potentially exploit this to conduct URL spoofing attacks. (CVE-2016-1942)

Ronald Crane discovered three vulnerabilities through code inspection.
If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-1944, CVE-2016-1945, CVE-2016-1946)

Francois Marier discovered that Application Reputation lookups didn't work correctly, disabling warnings for potentially malicious downloads. An attacker could potentially exploit this by tricking a user in to downloading a malicious file. Other parts of the Safe Browsing feature were unaffected by this. (CVE-2016-1947).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
96643	GLSA-201701-46 : Mozilla Network Security Service (NSS): Multiple vulnerabilities (Logjam) (SLOTH)	Nessus	Gentoo Local Security Checks	high
93871	Debian DSA-3688-1 : nss - security update (Logjam) (SLOTH)	Nessus	Debian Local Security Checks	critical
802019	Firefox < 44 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	critical
91379	GLSA-201605-06 : Mozilla Products: Multiple vulnerabilities (Logjam) (SLOTH)	Nessus	Gentoo Local Security Checks	critical
91258	Ubuntu 14.04 LTS / 16.04 LTS : Thunderbird vulnerabilities (USN-2973-1)	Nessus	Ubuntu Local Security Checks	high
91242	Debian DLA-480-1 : nss security update	Nessus	Debian Local Security Checks	critical
89766	FreeBSD : NSS -- multiple vulnerabilities (75091516-6f4b-4059-9884-6727023dc366)	Nessus	FreeBSD Local Security Checks	high
89021	SUSE SLES11 Security Update : MozillaFirefox, MozillaFirefox-branding-SLED, MozillaFirefox-branding-SLES-for-VMware, mozilla-nss (SUSE-SU-2016:0584-1) (SLOTH)	Nessus	SuSE Local Security Checks	critical
88938	Debian DLA-427-1 : nss security update	Nessus	Debian Local Security Checks	medium
88928	Ubuntu 12.04 LTS : nss regression (USN-2903-2)	Nessus	Ubuntu Local Security Checks	medium
9075	Mozilla Firefox < 44.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	critical
88838	Ubuntu 14.04 LTS : NSS vulnerability (USN-2903-1)	Nessus	Ubuntu Local Security Checks	medium
88637	Ubuntu 14.04 LTS : Firefox regression (USN-2880-2)	Nessus	Ubuntu Local Security Checks	critical
88620	SUSE SLED12 / SLES12 Security Update : MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss (SUSE-SU-2016:0338-1)	Nessus	SuSE Local Security Checks	critical
88619	SUSE SLED11 / SLES11 Security Update : MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nss (SUSE-SU-2016:0334-1)	Nessus	SuSE Local Security Checks	critical
88552	openSUSE Security Update : Mozilla Firefox (openSUSE-2016-131)	Nessus	SuSE Local Security Checks	critical
88549	openSUSE Security Update : the MozillaFirefox / mozilla-nss and mozilla-nspr (openSUSE-2016-128)	Nessus	SuSE Local Security Checks	critical
88461	Firefox < 44 Multiple Vulnerabilities	Nessus	Windows	critical
88459	Firefox < 44 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
88456	Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2880-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2016-1938

medium

Tenable Plugins

high

critical

critical

critical

high

critical

high

critical

medium

medium

critical

medium

critical

critical

critical

critical

critical

critical

critical

critical