Unscored USN-4231-1 1 CVE

nss vulnerability

Published Jan 8, 2020 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that NSS incorrectly handled certain inputs. An
attacker could possibly use this issue to execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	nss	2:3.28.4-0ubuntu0.16.04.10
Ubuntu · 18.04 LTS 18.04:LTS	nss	2:3.35-2ubuntu2.7
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	nss	2:3.28.4-0ubuntu0.14.04.5+esm4

Vulnerabilities 1

Unscored —

CVE-2019-17006

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases wh…

Mozilla NSS nss nss Debian Ubuntu

Oct 22, 2020

References

report
https://ubuntu.com/security/CVE-2019-17006