nss - security update

Fixed packages 1

Vulnerabilities 9

• Low 3.7
  CVE-2015-4000 Public exploit EPSS 100%

  The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…

  thunderbird firefox openssl openssl Debian Ubuntu
  May 21, 2015
• Unscored —
  CVE-2015-7181

  The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, …

  thunderbird firefox nss nss Debian Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7182 EPSS 10%

  Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x b…

  thunderbird firefox nss nss Debian Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7575

  Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…

  thunderbird firefox openssl openjdk-7 Debian Ubuntu
  Jan 9, 2016
• Unscored —
  CVE-2016-1938

  The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozill…

  thunderbird firefox nss nss Debian Ubuntu
  Jan 31, 2016
• Unscored —
  CVE-2016-1950

  Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21…

  thunderbird firefox firefox-esr nss Debian Ubuntu
  Mar 13, 2016
• Unscored —
  CVE-2016-1978

  Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS…

  thunderbird firefox nss nss Debian Ubuntu
  Mar 13, 2016
• Unscored —
  CVE-2016-1979

  Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Servi…

  thunderbird firefox firefox-esr nss Debian Ubuntu
  Mar 13, 2016
• Unscored —
  CVE-2016-2834

  Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to…

  thunderbird firefox nss nss Debian Ubuntu
  Jun 13, 2016