Skip to content
OpenAdvisories
Unscored RHSA-2014:1246 5 CVEs

Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client nss 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-debuginfo 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-tools 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-debuginfo 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-devel 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-pkcs11-devel 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-debuginfo 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-devel 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-pkcs11-devel 0:3.16.1-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-tools 0:3.16.1-2.el5

Vulnerabilities 5

  • Unscored —
    CVE-2013-1740

    The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when …

    nss Debian
  • Unscored —
    CVE-2014-1490

    Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27…

    nss Debian
  • Unscored —
    CVE-2014-1491

    Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before …

    nss Debian
  • Unscored —
    CVE-2014-1492

    The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Sec…

    firefox nss nss Debian Ubuntu
  • Unscored —
    CVE-2014-1545

    Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a den…

    nspr nspr Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1035281
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1053725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060953
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060955
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1079851
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1107432
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1110857
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1110860
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1246.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1740
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1740
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1740
  • report
    https://access.redhat.com/security/cve/CVE-2014-1490
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1490
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1490
  • article
    http://www.mozilla.org/security/announce/2014/mfsa2014-12.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-1491
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1491
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1491
  • report
    https://access.redhat.com/security/cve/CVE-2014-1492
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1492
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1492
  • report
    https://access.redhat.com/security/cve/CVE-2014-1545
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1545
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1545
  • article
    http://www.mozilla.org/security/announce/2014/mfsa2014-55.html