CVE-2016-5285
Fixed in a distro release EPSS 2%
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
Products: mozilla network_security_services
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nss | 2:3.25-1 |
| Debian 13 | nss | 2:3.25-1 |
| Debian 14 | nss | 2:3.25-1 |
| Red Hat Enterprise Linux 5 | nss | 0:3.21.3-2.el5_11 |
| Red Hat Enterprise Linux 5 | nss-debuginfo | 0:3.21.3-2.el5_11 |
| Red Hat Enterprise Linux 5 | nss-devel | 0:3.21.3-2.el5_11 |
| Red Hat Enterprise Linux 5 | nss-pkcs11-devel | 0:3.21.3-2.el5_11 |
| Red Hat Enterprise Linux 5 | nss-tools | 0:3.21.3-2.el5_11 |
| Red Hat Enterprise Linux 6 | nss | 0:3.21.3-2.el6_8 |
| Red Hat Enterprise Linux 6 | nss-debuginfo | 0:3.21.3-2.el6_8 |
| Red Hat Enterprise Linux 6 | nss-devel | 0:3.21.3-2.el6_8 |
| Red Hat Enterprise Linux 6 | nss-pkcs11-devel | 0:3.21.3-2.el6_8 |
| Red Hat Enterprise Linux 6 | nss-sysinit | 0:3.21.3-2.el6_8 |
| Red Hat Enterprise Linux 6 | nss-tools | 0:3.21.3-2.el6_8 |
| Red Hat Enterprise Linux 6 | nss-util | 0:3.21.3-1.el6_8 |
| Red Hat Enterprise Linux 6 | nss-util-debuginfo | 0:3.21.3-1.el6_8 |
| Red Hat Enterprise Linux 6 | nss-util-devel | 0:3.21.3-1.el6_8 |
| Red Hat Enterprise Linux 7 | nss | 0:3.21.3-2.el7_3 |
| Red Hat Enterprise Linux 7 | nss-debuginfo | 0:3.21.3-2.el7_3 |
| Red Hat Enterprise Linux 7 | nss-devel | 0:3.21.3-2.el7_3 |
| Red Hat Enterprise Linux 7 | nss-pkcs11-devel | 0:3.21.3-2.el7_3 |
| Red Hat Enterprise Linux 7 | nss-sysinit | 0:3.21.3-2.el7_3 |
| Red Hat Enterprise Linux 7 | nss-tools | 0:3.21.3-2.el7_3 |
| Red Hat Enterprise Linux 7 | nss-util | 0:3.21.3-1.1.el7_3 |
| Red Hat Enterprise Linux 7 | nss-util-debuginfo | 0:3.21.3-1.1.el7_3 |
| Red Hat Enterprise Linux 7 | nss-util-devel | 0:3.21.3-1.1.el7_3 |
| SUSE Linux Enterprise Desktop 12 SP1 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | mozilla-nss | 3.21.3-39.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | MozillaFirefox | 45.5.1esr-63.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | mozilla-nss | 3.21.3-30.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mozilla-nss | 3.21.3-39.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mozilla-nss | 3.21.3-39.1 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE Linux Enterprise Server 11 SP4 | mozilla-nss | 3.21.3-39.1 |
| SUSE Linux Enterprise Server 12 SP1 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Server 12 SP1 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Server 12 SP2 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Server 12 SP2 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Server 12-LTSS | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Server 12-LTSS | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mozilla-nss | 3.21.3-39.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mozilla-nss | 3.21.3-39.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | mozilla-nss | 3.21.3-50.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | MozillaFirefox | 45.5.0esr-88.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | mozilla-nss | 3.21.3-50.1 |
| SUSE Manager 2.1 | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE Manager 2.1 | mozilla-nss | 3.21.3-39.1 |
| SUSE Manager Proxy 2.1 | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE Manager Proxy 2.1 | mozilla-nss | 3.21.3-39.1 |
| SUSE OpenStack Cloud 5 | MozillaFirefox | 45.5.1esr-59.1 |
| SUSE OpenStack Cloud 5 | mozilla-nss | 3.21.3-39.1 |
| Ubuntu 14.04 LTS | nss | 2:3.26.2-0ubuntu0.14.04.3 |
| Ubuntu 16.04 LTS | nss | 2:3.26.2-0ubuntu0.16.04.2 |