Skip to content
OpenAdvisories
Unscored RHSA-2014:0917 6 CVEs

Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 48

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client nspr 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nspr-debuginfo 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nspr-devel 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss-debuginfo 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss-devel 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss-pkcs11-devel 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss-sysinit 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss-tools 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss-util 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss-util-debuginfo 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client nss-util-devel 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nspr 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nspr-debuginfo 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nspr-devel 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss-debuginfo 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss-devel 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss-pkcs11-devel 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss-sysinit 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss-tools 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss-util 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss-util-debuginfo 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode nss-util-devel 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nspr 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nspr-debuginfo 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nspr-devel 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss-debuginfo 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss-devel 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss-pkcs11-devel 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss-sysinit 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss-tools 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss-util 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss-util-debuginfo 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server nss-util-devel 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nspr 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nspr-debuginfo 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nspr-devel 0:4.10.6-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss-debuginfo 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss-devel 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss-pkcs11-devel 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss-sysinit 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss-tools 0:3.16.1-4.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss-util 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss-util-debuginfo 0:3.16.1-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation nss-util-devel 0:3.16.1-1.el6_5

Vulnerabilities 6

  • Unscored —
    CVE-2013-1740

    The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when …

    nss Debian
  • Unscored —
    CVE-2014-1490

    Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27…

    nss Debian
  • Unscored —
    CVE-2014-1491

    Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before …

    nss Debian
  • Unscored —
    CVE-2014-1492

    The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Sec…

    firefox nss nss Debian Ubuntu
  • Unscored —
    CVE-2014-1544

    Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services…

    thunderbird firefox nss nss Debian Ubuntu
  • Unscored —
    CVE-2014-1545

    Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a den…

    nspr nspr Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1053725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060953
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060955
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1079851
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1107432
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1112135
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1112136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1116198
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0917.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1740
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1740
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1740
  • report
    https://access.redhat.com/security/cve/CVE-2014-1490
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1490
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1490
  • article
    http://www.mozilla.org/security/announce/2014/mfsa2014-12.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-1491
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1491
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1491
  • report
    https://access.redhat.com/security/cve/CVE-2014-1492
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1492
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1492
  • report
    https://access.redhat.com/security/cve/CVE-2014-1544
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1544
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1544
  • article
    http://www.mozilla.org/security/announce/2014/mfsa2014-63.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-1545
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1545
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1545
  • article
    http://www.mozilla.org/security/announce/2014/mfsa2014-55.html