Все бюллетени/p7/ALT-PU-2013-1173-1
ALT-PU-2013-1173-1

Обновление пакета nss в ветке p7

Версия3.15.3-alt1
Задание#109080
Опубликовано2013-11-23
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (3)

CVE-2013-1741
HIGH7.5

Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.

Опубликовано: 2013-11-18Изменено: 2026-04-29
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
Ссылки
CVE-2013-5605
HIGH7.5

Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.

Опубликовано: 2013-11-18Изменено: 2026-04-29
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
Ссылки
CVE-2013-5606
MEDIUM5.8

The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.

Опубликовано: 2013-11-18Изменено: 2026-04-29
CVSS 2.0СРЕДНЯЯ 5.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N
Ссылки