nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
|
Configuration 3 [-]
| AND |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 4 Extended Lifecycle Support | |||
| nss-0:3.12.10-10.el4 | cpe:/o:redhat:rhel_els:4 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| nss-0:3.16.1-4.el5_11 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2014:1307 | 2014-09-26T00:00:00Z |
| Red Hat Enterprise Linux 5.6 Long Life | |||
| nss-0:3.12.8-10.el5_6 | cpe:/o:redhat:rhel_mission_critical:5.6 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| Red Hat Enterprise Linux 5.9 Extended Update Support | |||
| nss-0:3.14.3-10.el5_9 | cpe:/o:redhat:rhel_eus:5.9 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| nss-0:3.16.1-7.el6_5 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:1307 | 2014-09-26T00:00:00Z |
| nss-softokn-0:3.14.3-12.el6_5 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:1307 | 2014-09-26T00:00:00Z |
| nss-util-0:3.16.1-2.el6_5 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:1307 | 2014-09-26T00:00:00Z |
| Red Hat Enterprise Linux 6.2 Advanced Update Support | |||
| nss-0:3.13.1-11.el6_2 | cpe:/o:redhat:rhel_mission_critical:6.2 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| nss-softokn-0:3.12.9-12.el6_2 | cpe:/o:redhat:rhel_mission_critical:6.2 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| nss-util-0:3.13.1-6.el6_2 | cpe:/o:redhat:rhel_mission_critical:6.2 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| Red Hat Enterprise Linux 6.4 Extended Update Support | |||
| nss-0:3.14.3-8.el6_4 | cpe:/o:redhat:rhel_eus:6.4 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| nss-softokn-0:3.14.3-4.el6_4 | cpe:/o:redhat:rhel_eus:6.4 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| nss-util-0:3.14.3-4.el6_4 | cpe:/o:redhat:rhel_eus:6.4 | RHSA-2014:1371 | 2014-10-10T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| nss-0:3.16.2-7.el7_0 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2014:1307 | 2014-09-26T00:00:00Z |
| nss-softokn-0:3.16.2-2.el7_0 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2014:1307 | 2014-09-26T00:00:00Z |
| nss-util-0:3.16.2-2.el7_0 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2014:1307 | 2014-09-26T00:00:00Z |
| RHEV Manager version 3.4 | |||
| rhev-hypervisor6-0:6.5-20140930.1.el6ev | cpe:/a:redhat:rhev_manager:3 | RHSA-2014:1354 | 2014-10-02T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-62-1 | nss security update |
Debian DSA |
DSA-3033-1 | nss security update |
Debian DSA |
DSA-3034-1 | iceweasel security update |
Debian DSA |
DSA-3037-1 | icedove security update |
Ubuntu USN |
USN-2360-1 | Firefox vulnerabilities |
Ubuntu USN |
USN-2360-2 | Thunderbird vulnerabilities |
Ubuntu USN |
USN-2361-1 | NSS vulnerability |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 16.7% (16.703% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox_esr:31.1.0:*:*:*:*:*:*:* |
cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:* |