Summary
Antoine Delignat-Lavaud and others discovered that NSS incorrectly handled
parsing ASN.1 values. An attacker could use this issue to forge RSA
certificates.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | nss | 2:3.17.1-0ubuntu0.14.04.1 |
Vulnerabilities 1
-
Unscored —CVE-2014-1568 EPSS 17%
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Moz…
References
-
report
https://ubuntu.com/security/CVE-2014-1568