CVE-2018-18508
Fixed in a distro release EPSS 2%
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
Products: mozilla nss
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nss | 2:3.42.1-1 |
| Debian 13 | nss | 2:3.42.1-1 |
| Debian 14 | nss | 2:3.42.1-1 |
| Debian 8 | nss | 2:3.26-1+debu8u4 |
| Debian 9 | nss | 2:3.26.2-1.1+deb9u2 |
| Red Hat Enterprise Linux 8 | nspr | 0:4.21.0-2.el8_0 |
| Red Hat Enterprise Linux 8 | nspr-debuginfo | 0:4.21.0-2.el8_0 |
| Red Hat Enterprise Linux 8 | nspr-debugsource | 0:4.21.0-2.el8_0 |
| Red Hat Enterprise Linux 8 | nspr-devel | 0:4.21.0-2.el8_0 |
| Red Hat Enterprise Linux 8 | nss | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-debugsource | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-devel | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-devel | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-freebl | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-freebl-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-freebl-devel | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-sysinit | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-sysinit-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-tools | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-tools-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-util | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-util-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-util-devel | 0:3.44.0-7.el8_0 |
| SUSE Linux Enterprise Module for Basesystem 15 | mozilla-nspr | 4.23-3.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | mozilla-nss | 3.47.1-3.22.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | mozilla-nspr | 4.23-3.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | mozilla-nss | 3.47.1-3.22.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | mozilla-nss | 3.47.1-3.22.1 |
| Ubuntu 14.04 LTS | nss | 2:3.28.4-0ubuntu0.14.04.5 |
| Ubuntu 16.04 LTS | nss | 2:3.28.4-0ubuntu0.16.04.5 |
| Ubuntu 18.04 LTS | nss | 2:3.35-2ubuntu2.2 |
| openSUSE Leap 15.1 | mozilla-nspr | 4.23-lp151.2.6.1 |
| openSUSE Leap 15.1 | mozilla-nss | 3.47.1-lp151.2.9.1 |