CVE-2016-9574
Fixed in a distro release EPSS 1%CVSS 5.9
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
Products: mozilla network_security_services
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nss | 2:3.25-1 |
| Debian 13 | nss | 2:3.25-1 |
| Debian 14 | nss | 2:3.25-1 |
| SUSE Linux Enterprise Desktop 12 SP1 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | java-1_8_0-openjdk | 1.8.0.121-23.4 |
| SUSE Linux Enterprise Desktop 12 SP1 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | java-1_8_0-openjdk | 1.8.0.121-23.4 |
| SUSE Linux Enterprise Desktop 12 SP2 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | mozilla-nspr | 4.13.1-32.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | mozilla-nss | 3.29.5-46.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mozilla-nspr | 4.13.1-32.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mozilla-nss | 3.29.5-46.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mozilla-nspr | 4.13.1-32.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mozilla-nss | 3.29.5-46.1 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE Linux Enterprise Server 11 SP4 | mozilla-nspr | 4.13.1-32.1 |
| SUSE Linux Enterprise Server 11 SP4 | mozilla-nss | 3.29.5-46.1 |
| SUSE Linux Enterprise Server 12 SP1 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Server 12 SP1 | java-1_8_0-openjdk | 1.8.0.121-23.4 |
| SUSE Linux Enterprise Server 12 SP1 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Server 12 SP1 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Server 12 SP2 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Server 12 SP2 | java-1_8_0-openjdk | 1.8.0.121-23.4 |
| SUSE Linux Enterprise Server 12 SP2 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Server 12 SP2 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Server 12-LTSS | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Server 12-LTSS | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Server 12-LTSS | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | java-1_8_0-openjdk | 1.8.0.121-23.4 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mozilla-nspr | 4.13.1-32.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mozilla-nss | 3.29.5-46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_8_0-openjdk | 1.8.0.121-23.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_8_0-openjdk | 1.8.0.121-23.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mozilla-nspr | 4.13.1-32.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mozilla-nss | 3.29.5-46.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | mozilla-nss | 3.29.5-57.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | MozillaFirefox | 45.9.0esr-105.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | mozilla-nspr | 4.13.1-18.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | mozilla-nss | 3.29.5-57.1 |
| SUSE Manager 2.1 | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE Manager 2.1 | mozilla-nspr | 4.13.1-32.1 |
| SUSE Manager 2.1 | mozilla-nss | 3.29.5-46.1 |
| SUSE Manager Proxy 2.1 | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE Manager Proxy 2.1 | mozilla-nspr | 4.13.1-32.1 |
| SUSE Manager Proxy 2.1 | mozilla-nss | 3.29.5-46.1 |
| SUSE OpenStack Cloud 5 | MozillaFirefox | 45.9.0esr-71.2 |
| SUSE OpenStack Cloud 5 | mozilla-nspr | 4.13.1-32.1 |
| SUSE OpenStack Cloud 5 | mozilla-nss | 3.29.5-46.1 |