CVE-2019-17007
Fixed in a distro release EPSS 1%
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
Products: mozilla nss
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | nss | 2:3.42.1-1+deb10u2 |
| Debian 12 | nss | 2:3.45-1 |
| Debian 13 | nss | 2:3.45-1 |
| Debian 14 | nss | 2:3.45-1 |
| Debian 8 | nss | 2:3.26-1+debu8u8 |
| Debian 9 | nss | 2:3.26.2-1.1+deb9u2 |
| Red Hat Enterprise Linux 6 | nspr | 0:4.21.0-1.el6_10 |
| Red Hat Enterprise Linux 6 | nspr-debuginfo | 0:4.21.0-1.el6_10 |
| Red Hat Enterprise Linux 6 | nspr-devel | 0:4.21.0-1.el6_10 |
| Red Hat Enterprise Linux 6 | nss | 0:3.44.0-7.el6_10 |
| Red Hat Enterprise Linux 6 | nss-debuginfo | 0:3.44.0-7.el6_10 |
| Red Hat Enterprise Linux 6 | nss-devel | 0:3.44.0-7.el6_10 |
| Red Hat Enterprise Linux 6 | nss-pkcs11-devel | 0:3.44.0-7.el6_10 |
| Red Hat Enterprise Linux 6 | nss-softokn | 0:3.44.0-5.el6_10 |
| Red Hat Enterprise Linux 6 | nss-softokn-debuginfo | 0:3.44.0-5.el6_10 |
| Red Hat Enterprise Linux 6 | nss-softokn-devel | 0:3.44.0-5.el6_10 |
| Red Hat Enterprise Linux 6 | nss-softokn-freebl | 0:3.44.0-5.el6_10 |
| Red Hat Enterprise Linux 6 | nss-softokn-freebl-devel | 0:3.44.0-5.el6_10 |
| Red Hat Enterprise Linux 6 | nss-sysinit | 0:3.44.0-7.el6_10 |
| Red Hat Enterprise Linux 6 | nss-tools | 0:3.44.0-7.el6_10 |
| Red Hat Enterprise Linux 6 | nss-util | 0:3.44.0-1.el6_10 |
| Red Hat Enterprise Linux 6 | nss-util-debuginfo | 0:3.44.0-1.el6_10 |
| Red Hat Enterprise Linux 6 | nss-util-devel | 0:3.44.0-1.el6_10 |
| Red Hat Enterprise Linux 7 | nspr | 0:4.21.0-1.el7 |
| Red Hat Enterprise Linux 7 | nspr-debuginfo | 0:4.21.0-1.el7 |
| Red Hat Enterprise Linux 7 | nspr-devel | 0:4.21.0-1.el7 |
| Red Hat Enterprise Linux 7 | nss | 0:3.44.0-4.el7 |
| Red Hat Enterprise Linux 7 | nss-debuginfo | 0:3.44.0-4.el7 |
| Red Hat Enterprise Linux 7 | nss-devel | 0:3.44.0-4.el7 |
| Red Hat Enterprise Linux 7 | nss-pkcs11-devel | 0:3.44.0-4.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn | 0:3.44.0-5.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn-debuginfo | 0:3.44.0-5.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn-devel | 0:3.44.0-5.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn-freebl | 0:3.44.0-5.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn-freebl-devel | 0:3.44.0-5.el7 |
| Red Hat Enterprise Linux 7 | nss-sysinit | 0:3.44.0-4.el7 |
| Red Hat Enterprise Linux 7 | nss-tools | 0:3.44.0-4.el7 |
| Red Hat Enterprise Linux 7 | nss-util | 0:3.44.0-3.el7 |
| Red Hat Enterprise Linux 7 | nss-util-debuginfo | 0:3.44.0-3.el7 |
| Red Hat Enterprise Linux 7 | nss-util-devel | 0:3.44.0-3.el7 |
| Red Hat Enterprise Linux 8 | nspr | 0:4.21.0-2.el8_0 |
| Red Hat Enterprise Linux 8 | nspr-debuginfo | 0:4.21.0-2.el8_0 |
| Red Hat Enterprise Linux 8 | nspr-debugsource | 0:4.21.0-2.el8_0 |
| Red Hat Enterprise Linux 8 | nspr-devel | 0:4.21.0-2.el8_0 |
| Red Hat Enterprise Linux 8 | nss | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-debugsource | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-devel | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-devel | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-freebl | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-freebl-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-softokn-freebl-devel | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-sysinit | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-sysinit-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-tools | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-tools-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-util | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-util-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat Enterprise Linux 8 | nss-util-devel | 0:3.44.0-7.el8_0 |
| Red Hat rhel eus 7.6 | nss | 0:3.36.0-9.el7_6 |
| Red Hat rhel eus 7.6 | nss-debuginfo | 0:3.36.0-9.el7_6 |
| Red Hat rhel eus 7.6 | nss-devel | 0:3.36.0-9.el7_6 |
| Red Hat rhel eus 7.6 | nss-pkcs11-devel | 0:3.36.0-9.el7_6 |
| Red Hat rhel eus 7.6 | nss-softokn | 0:3.36.0-7.el7_6 |
| Red Hat rhel eus 7.6 | nss-softokn-debuginfo | 0:3.36.0-7.el7_6 |
| Red Hat rhel eus 7.6 | nss-softokn-devel | 0:3.36.0-7.el7_6 |
| Red Hat rhel eus 7.6 | nss-softokn-freebl | 0:3.36.0-7.el7_6 |
| Red Hat rhel eus 7.6 | nss-softokn-freebl-devel | 0:3.36.0-7.el7_6 |
| Red Hat rhel eus 7.6 | nss-sysinit | 0:3.36.0-9.el7_6 |
| Red Hat rhel eus 7.6 | nss-tools | 0:3.36.0-9.el7_6 |
| Ubuntu 16.04 LTS | nss | 2:3.28.4-0ubuntu0.16.04.9 |
| Ubuntu 18.04 LTS | nss | 2:3.35-2ubuntu2.6 |
| Ubuntu Pro 14.04 LTS | nss | 2:3.28.4-0ubuntu0.14.04.5+esm3 |