CVE-2016-1978

HIGH

Description

Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption.

References

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html

http://rhn.redhat.com/errata/RHSA-2016-0591.html

http://rhn.redhat.com/errata/RHSA-2016-0684.html

http://rhn.redhat.com/errata/RHSA-2016-0685.html

http://www.debian.org/security/2016/dsa-3688

http://www.mozilla.org/security/announce/2016/mfsa2016-15.html

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.securityfocus.com/bid/84275

http://www.securityfocus.com/bid/91787

http://www.securitytracker.com/id/1035258

http://www.ubuntu.com/usn/USN-2973-1

https://bto.bluecoat.com/security-advisory/sa124

https://bugzilla.mozilla.org/show_bug.cgi?id=1209546

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes

https://security.gentoo.org/glsa/201605-06

Details

Source: MITRE

Published: 2016-03-13

Updated: 2017-11-04

Risk Information

CVSS v2.0

Base Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 10

Severity: HIGH

CVSS v3.0

Base Score: 7.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Impact Score: 3.4

Exploitability Score: 3.9

Severity: HIGH

Vulnerable Software

Configuration 1

AND

OR

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

OR

cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*

Tenable Plugins

View all (26 total)

IDNameProductFamilySeverity
99780EulerOS 2.0 SP1 : nss, nspr, nss-softokn, nss-util (EulerOS-SA-2016-1017)NessusHuawei Local Security Checks
high
93871Debian DSA-3688-1 : nss - security update (Logjam) (SLOTH)NessusDebian Local Security Checks
high
802019Firefox < 44 Multiple VulnerabilitiesLog Correlation EngineWeb Clients
critical
91379GLSA-201605-06 : Mozilla Products: Multiple vulnerabilities (Logjam) (SLOTH)NessusGentoo Local Security Checks
critical
91258Ubuntu 12.04 LTS / 14.04 LTS / 15.10 / 16.04 LTS : thunderbird vulnerabilities (USN-2973-1)NessusUbuntu Local Security Checks
critical
91242Debian DLA-480-1 : nss security updateNessusDebian Local Security Checks
high
91240Amazon Linux AMI : nspr / nss-util,nss,nss-softokn (ALAS-2016-702)NessusAmazon Linux Local Security Checks
high
90752Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20160425)NessusScientific Linux Local Security Checks
high
90751Scientific Linux Security Update : nss, nspr, nss-softokn, and nss-util on SL7.x x86_64 (20160425)NessusScientific Linux Local Security Checks
high
90749RHEL 7 : nss, nspr, nss-softokn, and nss-util (RHSA-2016:0685)NessusRed Hat Local Security Checks
high
90748RHEL 5 : nss and nspr (RHSA-2016:0684)NessusRed Hat Local Security Checks
high
90746Oracle Linux 7 : nspr / nss / nss-softokn / nss-util (ELSA-2016-0685)NessusOracle Linux Local Security Checks
high
90745Oracle Linux 5 : nspr / nss (ELSA-2016-0684)NessusOracle Linux Local Security Checks
high
90722CentOS 7 : nspr / nss / nss-softokn / nss-util (CESA-2016:0685)NessusCentOS Local Security Checks
high
90721CentOS 5 : nspr / nss (CESA-2016:0684)NessusCentOS Local Security Checks
high
90392Scientific Linux Security Update : nss, nss-util, and nspr on SL6.x i386/x86_64 (20160405)NessusScientific Linux Local Security Checks
high
90386RHEL 6 : nss, nss-util, and nspr (RHSA-2016:0591)NessusRed Hat Local Security Checks
high
90383Oracle Linux 6 : nspr / nss / nss-util (ELSA-2016-0591)NessusOracle Linux Local Security Checks
high
90367CentOS 6 : nspr / nss / nss-util (CESA-2016:0591)NessusCentOS Local Security Checks
high
90263SUSE SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0909-1)NessusSuSE Local Security Checks
critical
90065SUSE SLES10 Security Update : MozillaFirefox (SUSE-SU-2016:0820-1)NessusSuSE Local Security Checks
critical
89990SUSE SLED11 / SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0777-1)NessusSuSE Local Security Checks
critical
89929SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0727-1)NessusSuSE Local Security Checks
critical
89766FreeBSD : NSS -- multiple vulnerabilities (75091516-6f4b-4059-9884-6727023dc366)NessusFreeBSD Local Security Checks
high
88461Firefox < 44 Multiple VulnerabilitiesNessusWindows
critical
88459Firefox < 44 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
critical