Mozilla NSS: Schwachstelle ermöglicht Codeausführung

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2021-43527 EPSS 18%

  NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DE…

  Mozilla NSS thunderbird nss Debian Ubuntu Azure Linux Alpine
  Dec 8, 2021

Revision history

1. 2023-02-22 #15

   Neue Updates von Amazon aufgenommen

2. 2022-12-18 #14

   Neue Updates von Gentoo aufgenommen

3. 2022-12-11 #13

   Neue Updates von Amazon aufgenommen

4. 2022-09-01 #12

   Neue Updates von SUSE aufgenommen

5. 2022-07-31 #11

   Neue Updates von SUSE aufgenommen

6. 2022-07-24 #10

   Neue Updates von SUSE aufgenommen

7. 2022-05-19 #9

   Referenz(en) aufgenommen: 2088353

8. 2022-05-17 #8

   Neue Updates von IBM aufgenommen

9. 2022-01-19 #7

   Neue Updates von Red Hat aufgenommen

10. 2021-12-16 #6

    Neue Updates von Red Hat aufgenommen

11. 2021-12-08 #5

    Neue Updates von Red Hat und LibreOffice aufgenommen

12. 2021-12-07 #4

    Neue Updates von Ubuntu, Oracle Linux, Red Hat und ORACLE aufgenommen

13. 2021-12-06 #3

    Neue Updates von Red Hat und SUSE aufgenommen

14. 2021-12-02 #2

    Neue Updates von Red Hat, Debian und Fedora aufgenommen

15. 2021-12-01 #1

    Initiale Fassung

References

• Amazon Linux Security Advisory ALAS-2023-1955 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1955.html
• Amazon Linux Security Advisory ALAS-2023-1952 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1952.html
• Amazon Linux Security Advisory ALAS-2023-1953 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1953.html
• Amazon Linux Security Advisory ALAS-2023-1954 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1954.html
• Gentoo Linux Security Advisory GLSA-202212-05 vom 2022-12-19
  https://security.gentoo.org/glsa/202212-05
• Amazon Linux Security Advisory ALAS-2022-223 vom 2022-12-09
  https://alas.aws.amazon.com/AL2022/ALAS-2022-223.html
• Mozilla Foundation Security Advisory MFSA2021-51 vom 2021-12-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/
• Google Project Zero Blog vom 2021-12-01
  https://googleprojectzero.blogspot.com/2021/12/this-shouldnt-have-happened.html
• Amazon Linux Security Advisory ALAS-2021-1722 vom 2021-12-02
  https://alas.aws.amazon.com/AL2/ALAS-2021-1722.html
• Red Hat Security Advisory RHSA-2021:4904 vom 2021-12-01
  https://access.redhat.com/errata/RHSA-2021:4904
• Red Hat Security Advisory RHSA-2021:4907 vom 2021-12-02
  https://access.redhat.com/errata/RHSA-2021:4907
• Ubuntu Security Notice USN-5168-1 vom 2021-12-01
  https://ubuntu.com/security/notices/USN-5168-1
• Ubuntu Security Notice USN-5168-3 vom 2021-12-01
  https://ubuntu.com/security/notices/USN-5168-3
• Debian Security Advisory DSA-5016 vom 2021-12-02
  https://www.debian.org/security/2021/dsa-5016
• Oracle Linux Security Advisory ELSA-2021-4904 vom 2021-12-01
  https://linux.oracle.com/errata/ELSA-2021-4904.html
• Ubuntu Security Notice USN-5168-2 vom 2021-12-01
  https://ubuntu.com/security/notices/USN-5168-2
• Red Hat Security Advisory RHSA-2021:4903 vom 2021-12-01
  https://access.redhat.com/errata/RHSA-2021:4903
• Oracle Linux Security Advisory ELSA-2021-4903 vom 2021-12-01
  https://linux.oracle.com/errata/ELSA-2021-4903.html
• Amazon Linux Security Advisory ALAS-2021-1552 vom 2021-12-02
  https://alas.aws.amazon.com/ALAS-2021-1552.html
• Red Hat Security Advisory RHSA-2021:4909 vom 2021-12-02
  https://access.redhat.com/errata/RHSA-2021:4909
• Debian Security Advisory DLA-2836 vom 2021-12-02
  https://lists.debian.org/debian-lts-announce/2021/12/msg00000.html
• Red Hat Security Advisory RHSA-2021:4919 vom 2021-12-02
  https://access.redhat.com/errata/RHSA-2021:4919
• Arch Linux Security Advisory ASA-202112-4 vom 2021-12-03
  https://www.cybersecurity-help.cz/vdb/SB2021120324
• Arch Linux Security Advisory ASA-202112-3 vom 2021-12-03
  https://www.cybersecurity-help.cz/vdb/SB2021120325
• Red Hat Security Advisory RHSA-2021:4933 vom 2021-12-06
  https://access.redhat.com/errata/RHSA-2021:4933
• Red Hat Security Advisory RHSA-2021:4946 vom 2021-12-06
  https://access.redhat.com/errata/RHSA-2021:4946
• Red Hat Security Advisory RHSA-2021:4932 vom 2021-12-06
  https://access.redhat.com/errata/RHSA-2021:4932
• Red Hat Security Advisory RHSA-2021:4953 vom 2021-12-06
  https://access.redhat.com/errata/RHSA-2021:4953
• Red Hat Security Advisory RHSA-2021:4954 vom 2021-12-06
  https://access.redhat.com/errata/RHSA-2021:4954
• Red Hat Security Advisory RHSA-2021:4969 vom 2021-12-07
  https://access.redhat.com/errata/RHSA-2021:4969
• SUSE Security Update SUSE-SU-2021:3939-1 vom 2021-12-06
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009847.html
• SUSE Security Update SUSE-SU-2021:3934-1 vom 2021-12-06
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009850.html
• SUSE Security Update SUSE-SU-2021:14858-1 vom 2021-12-06
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009861.html
• Ubuntu Security Notice USN-5168-4 vom 2021-12-07
  https://ubuntu.com/security/notices/USN-5168-4
• Oracle Linux Security Advisory ELSA-2021-9591 vom 2021-12-07
  http://linux.oracle.com/errata/ELSA-2021-9591.html
• Red Hat Security Advisory RHSA-2021:4994 vom 2021-12-07
  https://access.redhat.com/errata/RHSA-2021:4994
• ORACLE OVMSA-2021-0040 vom 2021-12-07
  https://oss.oracle.com/pipermail/oraclevm-errata/2021-December/001040.html
• Red Hat Security Advisory RHSA-2021:5006 vom 2021-12-08
  https://access.redhat.com/errata/RHSA-2021:5006
• Red Hat Security Advisory RHSA-2021:5035 vom 2021-12-08
  https://access.redhat.com/errata/RHSA-2021:5035
• LibreOffice Community Update vom 2021-12-06
  https://blog.documentfoundation.org/blog/2021/12/06/libreoffice-7-2-4-and-7-1-8-community/
• Amazon Linux Security Advisory ALAS-2021-002 vom 2021-12-09
  https://alas.aws.amazon.com/AL2022/ALAS-2021-002.html
• Red Hat Security Advisory RHSA-2021:5107 vom 2021-12-16
  https://access.redhat.com/errata/RHSA-2021:5107
• Red Hat Security Advisory RHSA-2022:0191 vom 2022-01-20
  https://access.redhat.com/errata/RHSA-2022:0191
• IBM Security Bulletin 6587384 vom 2022-05-18
  https://www.ibm.com/blogs/psirt/security-bulletin-heap-based-buffer-overflow-in-mozilla-network-security-services-nss-may-affect-ibm-spectrum-protect-plus-cve-2021-43527/
• SUSE Security Update SUSE-SU-2022:2536-1 vom 2022-07-22
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011639.html
• SUSE Security Update SUSE-SU-2022:2533-1 vom 2022-07-22
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011637.html
• SUSE Security Update SUSE-SU-2022:2595-1 vom 2022-07-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011716.html
• SUSE Security Update SUSE-SU-2022:2533-2 vom 2022-09-01
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012046.html