Description
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nss | 2:3.17.2-1.1 | — |
| Debian 13 | nss | 2:3.17.2-1.1 | — |
| Debian 12 | nss | 2:3.17.2-1.1 | — |
| Debian 7 | nss | 2:3.14.5-1+deb7u4 | DSA-3186-1 |
| Debian 6.0 | nss | 3.12.8-1+squeeze11 | DLA-154-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | nss | 2:3.17.1-0ubuntu0.14.04.2 | USN-2452-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | nspr +1 | 4.10.8-1.ael7b_1 | RHBA-2015:0965 |
| RHEL 7 | nss +4 | 3.18.0-2.2.ael7b_1 | RHBA-2015:0965 |
| RHEL 7 | nss-util +1 | 3.18.0-1.ael7b_1 | RHBA-2015:0965 |
| RHEL 6 | nspr +1 | 4.10.8-1.el6_6 | RHBA-2015:0926 |
| RHEL 6 | nss +4 | 3.18.0-5.3.el6_6 | RHBA-2015:0926 |
| RHEL 6 | nss-util +1 | 3.18.0-1.el6_6 | RHBA-2015:0926 |
| RHEL 5 | nspr +1 | 4.10.8-1.el5_11 | RHBA-2015:0925 |
| RHEL 5 | nss +3 | 3.18.0-6.el5_11 | RHBA-2015:0925 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | mozilla-nss | 3.26.2-1.1 | openSUSE-SU-2024:10451-1 |
Advisories 7
- RHBA-2015:0965 Red Hat Bug Fix Advisory: nss, nss-util, and nspr bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHBA-2015:0925 Red Hat Bug Fix Advisory: nss and nspr bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHBA-2015:0926 Red Hat Bug Fix Advisory: nss, nss-util, and nspr bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- USN-2452-1 nss vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- DSA-3186-1 nss - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-154-1 nss - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10451-1 libfreebl3-3.26.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1064670
- openSUSE-SU-2015:0138 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.3_release_notes
- http://www.intelsecurity.com/resources/wp-berserk-analysis-part-1.pdf
- 1032909 vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- SUSE-SU-2015:0173 vendor-advisory
- SUSE-SU-2015:0171 vendor-advisory
- https://www.imperialviolet.org/2014/09/26/pkcs1.html
- openSUSE-SU-2015:0404 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- DSA-3186 vendor-advisory
- https://www.reddit.com/r/netsec/comments/2hd1m8/rsa_signature_forgery_in_nss/cksnr02
- SUSE-SU-2015:0180 vendor-advisory