Summary
It was discovered that NSS incorrectly handled certain certificates.
An attacker could possibly use this issue to cause a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | nss | 2:3.28.4-0ubuntu0.16.04.9 |
| Ubuntu · 18.04 LTS 18.04:LTS | nss | 2:3.35-2ubuntu2.6 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | nss | 2:3.28.4-0ubuntu0.14.04.5+esm3 |
Vulnerabilities 1
-
Unscored —
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting i…
References
-
report
https://ubuntu.com/security/CVE-2019-17007