CVE-2016-1979

MEDIUM

Description

Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.

References

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html

http://rhn.redhat.com/errata/RHSA-2016-0591.html

http://rhn.redhat.com/errata/RHSA-2016-0684.html

http://rhn.redhat.com/errata/RHSA-2016-0685.html

http://www.debian.org/security/2016/dsa-3576

http://www.debian.org/security/2016/dsa-3688

http://www.mozilla.org/security/announce/2016/mfsa2016-36.html

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.securityfocus.com/bid/84221

http://www.securitytracker.com/id/1035215

http://www.ubuntu.com/usn/USN-2973-1

https://bto.bluecoat.com/security-advisory/sa124

https://bugzilla.mozilla.org/show_bug.cgi?id=1185033

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes

https://security.gentoo.org/glsa/201605-06

Details

Source: MITRE

Published: 2016-03-13

Updated: 2017-11-04

Risk Information

CVSS v2.0

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3.0

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 2.8

Severity: HIGH

Vulnerable Software

Configuration 1

AND

OR

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

OR

cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*

Tenable Plugins

View all (32 total)

IDNameProductFamilySeverity
99780EulerOS 2.0 SP1 : nss, nspr, nss-softokn, nss-util (EulerOS-SA-2016-1017)NessusHuawei Local Security Checks
high
93871Debian DSA-3688-1 : nss - security update (Logjam) (SLOTH)NessusDebian Local Security Checks
high
802023Firefox < 45 Multiple VulnerabilitiesLog Correlation EngineWeb Clients
critical
93257F5 Networks BIG-IP : Mozilla NSS vulnerability (K20145801)NessusF5 Networks Local Security Checks
medium
91379GLSA-201605-06 : Mozilla Products: Multiple vulnerabilities (Logjam) (SLOTH)NessusGentoo Local Security Checks
critical
91258Ubuntu 12.04 LTS / 14.04 LTS / 15.10 / 16.04 LTS : thunderbird vulnerabilities (USN-2973-1)NessusUbuntu Local Security Checks
critical
91242Debian DLA-480-1 : nss security updateNessusDebian Local Security Checks
high
91240Amazon Linux AMI : nspr / nss-util,nss,nss-softokn (ALAS-2016-702)NessusAmazon Linux Local Security Checks
high
91138Debian DSA-3576-1 : icedove - security updateNessusDebian Local Security Checks
critical
91134Debian DLA-472-2 : icedove regression updateNessusDebian Local Security Checks
critical
90752Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20160425)NessusScientific Linux Local Security Checks
high
90751Scientific Linux Security Update : nss, nspr, nss-softokn, and nss-util on SL7.x x86_64 (20160425)NessusScientific Linux Local Security Checks
high
90749RHEL 7 : nss, nspr, nss-softokn, and nss-util (RHSA-2016:0685)NessusRed Hat Local Security Checks
high
90748RHEL 5 : nss and nspr (RHSA-2016:0684)NessusRed Hat Local Security Checks
high
90746Oracle Linux 7 : nspr / nss / nss-softokn / nss-util (ELSA-2016-0685)NessusOracle Linux Local Security Checks
high
90745Oracle Linux 5 : nspr / nss (ELSA-2016-0684)NessusOracle Linux Local Security Checks
high
90722CentOS 7 : nspr / nss / nss-softokn / nss-util (CESA-2016:0685)NessusCentOS Local Security Checks
high
90721CentOS 5 : nspr / nss (CESA-2016:0684)NessusCentOS Local Security Checks
high
9207Mozilla Firefox < 45.0 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
high
90392Scientific Linux Security Update : nss, nss-util, and nspr on SL6.x i386/x86_64 (20160405)NessusScientific Linux Local Security Checks
high
90386RHEL 6 : nss, nss-util, and nspr (RHSA-2016:0591)NessusRed Hat Local Security Checks
high
90383Oracle Linux 6 : nspr / nss / nss-util (ELSA-2016-0591)NessusOracle Linux Local Security Checks
high
90367CentOS 6 : nspr / nss / nss-util (CESA-2016:0591)NessusCentOS Local Security Checks
high
90263SUSE SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0909-1)NessusSuSE Local Security Checks
critical
90065SUSE SLES10 Security Update : MozillaFirefox (SUSE-SU-2016:0820-1)NessusSuSE Local Security Checks
critical
89990SUSE SLED11 / SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0777-1)NessusSuSE Local Security Checks
critical
89929SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0727-1)NessusSuSE Local Security Checks
critical
89915openSUSE Security Update : Firefox (openSUSE-2016-334)NessusSuSE Local Security Checks
critical
89913openSUSE Security Update : MozillaFirefox / mozilla-nspr / mozilla-nss (openSUSE-2016-332)NessusSuSE Local Security Checks
critical
89875Firefox < 45 Multiple VulnerabilitiesNessusWindows
critical
89873Firefox < 45 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
critical
89768FreeBSD : NSS -- multiple vulnerabilities (c4292768-5273-4f17-a267-c5fe35125ce4)NessusFreeBSD Local Security Checks
medium