Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-1544

Fixed in a distro release EPSS 6%

Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.

Published 2014-07-23 · CVE record · OSV

Products: mozilla firefox, mozilla firefox_esr, mozilla network_security_services, mozilla thunderbird

Distro releases

ReleasePackageFixed in
Debian 12nss2:3.16.3-1
Debian 13nss2:3.16.3-1
Debian 14nss2:3.16.3-1
Debian 6.0nss3.12.8-1+squeeze10
Debian 7icedove24.7.0-1~deb7u1
Debian 7iceweasel24.7.0esr-1~deb7u1
Debian 7nss2:3.14.5-1+deb7u3
Red Hat Enterprise Linux 5nspr0:4.10.6-1.el5_10
Red Hat Enterprise Linux 5nspr-debuginfo0:4.10.6-1.el5_10
Red Hat Enterprise Linux 5nspr-devel0:4.10.6-1.el5_10
Red Hat Enterprise Linux 5nss0:3.15.3-7.el5_10
Red Hat Enterprise Linux 5nss-debuginfo0:3.15.3-7.el5_10
Red Hat Enterprise Linux 5nss-devel0:3.15.3-7.el5_10
Red Hat Enterprise Linux 5nss-pkcs11-devel0:3.15.3-7.el5_10
Red Hat Enterprise Linux 5nss-tools0:3.15.3-7.el5_10
Red Hat Enterprise Linux 6nspr0:4.10.6-1.el6_5
Red Hat Enterprise Linux 6nspr-debuginfo0:4.10.6-1.el6_5
Red Hat Enterprise Linux 6nspr-devel0:4.10.6-1.el6_5
Red Hat Enterprise Linux 6nss0:3.16.1-4.el6_5
Red Hat Enterprise Linux 6nss-debuginfo0:3.16.1-4.el6_5
Red Hat Enterprise Linux 6nss-devel0:3.16.1-4.el6_5
Red Hat Enterprise Linux 6nss-pkcs11-devel0:3.16.1-4.el6_5
Red Hat Enterprise Linux 6nss-sysinit0:3.16.1-4.el6_5
Red Hat Enterprise Linux 6nss-tools0:3.16.1-4.el6_5
Red Hat Enterprise Linux 6nss-util0:3.16.1-1.el6_5
Red Hat Enterprise Linux 6nss-util-debuginfo0:3.16.1-1.el6_5
Red Hat Enterprise Linux 6nss-util-devel0:3.16.1-1.el6_5
Red Hat Enterprise Linux 7nspr0:4.10.6-1.el7_0
Red Hat Enterprise Linux 7nspr-debuginfo0:4.10.6-1.el7_0
Red Hat Enterprise Linux 7nspr-devel0:4.10.6-1.el7_0
Red Hat Enterprise Linux 7nss0:3.15.4-7.el7_0
Red Hat Enterprise Linux 7nss-debuginfo0:3.15.4-7.el7_0
Red Hat Enterprise Linux 7nss-devel0:3.15.4-7.el7_0
Red Hat Enterprise Linux 7nss-pkcs11-devel0:3.15.4-7.el7_0
Red Hat Enterprise Linux 7nss-sysinit0:3.15.4-7.el7_0
Red Hat Enterprise Linux 7nss-tools0:3.15.4-7.el7_0
Red Hat rhel els 4nss0:3.12.10-7.el4
Red Hat rhel els 4nss-debuginfo0:3.12.10-7.el4
Red Hat rhel els 4nss-devel0:3.12.10-7.el4
Red Hat rhel els 4nss-tools0:3.12.10-7.el4
Red Hat rhel eus 5.9nss0:3.14.3-9.el5_9
Red Hat rhel eus 5.9nss-debuginfo0:3.14.3-9.el5_9
Red Hat rhel eus 5.9nss-devel0:3.14.3-9.el5_9
Red Hat rhel eus 5.9nss-pkcs11-devel0:3.14.3-9.el5_9
Red Hat rhel eus 5.9nss-tools0:3.14.3-9.el5_9
Red Hat rhel eus 6.4nss0:3.14.3-6.el6_4
Red Hat rhel eus 6.4nss-debuginfo0:3.14.3-6.el6_4
Red Hat rhel eus 6.4nss-devel0:3.14.3-6.el6_4
Red Hat rhel eus 6.4nss-pkcs11-devel0:3.14.3-6.el6_4
Red Hat rhel eus 6.4nss-sysinit0:3.14.3-6.el6_4
Red Hat rhel eus 6.4nss-tools0:3.14.3-6.el6_4
Red Hat rhel mission critical 5.6nss0:3.12.8-9.el5_6
Red Hat rhel mission critical 5.6nss-debuginfo0:3.12.8-9.el5_6
Red Hat rhel mission critical 5.6nss-devel0:3.12.8-9.el5_6
Red Hat rhel mission critical 5.6nss-pkcs11-devel0:3.12.8-9.el5_6
Red Hat rhel mission critical 5.6nss-tools0:3.12.8-9.el5_6
Red Hat rhel mission critical 6.2nss0:3.13.1-10.el6_2
Red Hat rhel mission critical 6.2nss-debuginfo0:3.13.1-10.el6_2
Red Hat rhel mission critical 6.2nss-devel0:3.13.1-10.el6_2
Red Hat rhel mission critical 6.2nss-pkcs11-devel0:3.13.1-10.el6_2
Red Hat rhel mission critical 6.2nss-sysinit0:3.13.1-10.el6_2
Red Hat rhel mission critical 6.2nss-tools0:3.13.1-10.el6_2
Ubuntu 14.04 LTSfirefox31.0+build1-0ubuntu0.14.04.1
Ubuntu 14.04 LTSnss2:3.15.4-1ubuntu7.1
Ubuntu 14.04 LTSthunderbird1:31.0+build1-0ubuntu0.14.04.1
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1