CVE-2017-7502 (GCVE-0-2017-7502)

Vulnerability from cvelistv5 – Published: 2017-05-30 18:00 – Updated: 2024-08-05 16:04
VLAI
Summary
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
Severity
No CVSS data available.
CWE
Assigner
References
URL Tags
https://access.redhat.com/errata/RHSA-2017:1365 vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1038579 vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/98744 vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2017:1712 vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/security-adviso… x_refsource_CONFIRM
https://hg.mozilla.org/projects/nss/rev/55ea60effd0d x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:1364 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:1567 vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2017/dsa-3872 vendor-advisoryx_refsource_DEBIAN
Impacted products
Vendor Product Version
NSS project nss Affected: since 3.24.0
Create a notification for this product.
Date Public
2017-01-03 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:11.874Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1365",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1365"
          },
          {
            "name": "1038579",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038579"
          },
          {
            "name": "98744",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98744"
          },
          {
            "name": "RHSA-2017:1712",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1712"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://hg.mozilla.org/projects/nss/rev/55ea60effd0d"
          },
          {
            "name": "RHSA-2017:1364",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1364"
          },
          {
            "name": "RHSA-2017:1567",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1567"
          },
          {
            "name": "DSA-3872",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3872"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "nss",
          "vendor": "NSS project",
          "versions": [
            {
              "status": "affected",
              "version": "since 3.24.0"
            }
          ]
        }
      ],
      "datePublic": "2017-01-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:1365",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1365"
        },
        {
          "name": "1038579",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038579"
        },
        {
          "name": "98744",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98744"
        },
        {
          "name": "RHSA-2017:1712",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1712"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://hg.mozilla.org/projects/nss/rev/55ea60effd0d"
        },
        {
          "name": "RHSA-2017:1364",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1364"
        },
        {
          "name": "RHSA-2017:1567",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1567"
        },
        {
          "name": "DSA-3872",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3872"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-7502",
    "datePublished": "2017-05-30T18:00:00.000Z",
    "dateReserved": "2017-04-05T00:00:00.000Z",
    "dateUpdated": "2024-08-05T16:04:11.874Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2017-7502",
      "date": "2026-05-27",
      "epss": "0.01449",
      "percentile": "0.81022"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.24.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"630172B3-35C0-4F6F-9314-B373479B5031\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.25.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B57208D-8174-44B9-853C-4F7F2421AF05\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.25.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A628134E-1542-4A48-8615-7A0162598720\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.26.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"76D03667-90A8-4277-8C5E-E2601EF6DAA4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.26.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F15238C6-62BA-40F8-9362-F0B7FAF38915\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.27.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1FDD2D7F-CB2A-47EF-886C-BA243E332C97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.27.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"04F1B087-FE60-4B95-9BCF-F5BAA8CEE3A4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.27.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5404F24C-F227-4F93-9036-D809CF29B6F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.28.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"199BCC71-C530-4BB7-9E25-C1119A6E5F51\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.28.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0EF88310-4B46-497F-9519-A1FFFF31D6A9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.28.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D1133B63-F6A0-4A56-B544-828B751D728A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.28.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C92CFFB1-A4E0-49C2-84F4-784E10E5EBEB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.29.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A539983F-E03E-44F7-92FE-5D18ACEB9872\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.29.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C2C10A9-B0C5-41CF-98A2-C127E98F8CC2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.29.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DAB24400-3E42-45B3-AC58-62638E419141\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.29.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"54E14F84-F751-455E-ADE8-BDABD146B31A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.30.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A69F1814-1D94-47AB-AD50-2B1F042DCA0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:network_security_services:3.30.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"175E697B-FC1D-483B-9235-9162534FB093\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.\"}, {\"lang\": \"es\", \"value\": \"Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en NSS desde la versi\\u00f3n 3.24.0 en la que el servidor recibe mensajes SSLv2 vac\\u00edos, lo que da lugar a una denegaci\\u00f3n de servicio (DoS) por parte de atacantes remotos.\"}]",
      "id": "CVE-2017-7502",
      "lastModified": "2024-11-21T03:32:01.673",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2017-05-30T18:29:00.237",
      "references": "[{\"url\": \"http://www.debian.org/security/2017/dsa-3872\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/98744\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1038579\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1364\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1365\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1567\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1712\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://hg.mozilla.org/projects/nss/rev/55ea60effd0d\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.debian.org/security/2017/dsa-3872\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/98744\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1038579\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1364\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1365\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1567\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1712\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://hg.mozilla.org/projects/nss/rev/55ea60effd0d\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"secalert@redhat.com\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-476\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-476\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-7502\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2017-05-30T18:29:00.237\",\"lastModified\":\"2026-05-13T00:24:29.033\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.\"},{\"lang\":\"es\",\"value\":\"Se ha encontrado una vulnerabilidad de desreferencia de puntero NULL en NSS desde la versi\u00f3n 3.24.0 en la que el servidor recibe mensajes SSLv2 vac\u00edos, lo que da lugar a una denegaci\u00f3n de servicio (DoS) por parte de atacantes remotos.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.24.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"630172B3-35C0-4F6F-9314-B373479B5031\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.25.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B57208D-8174-44B9-853C-4F7F2421AF05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.25.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A628134E-1542-4A48-8615-7A0162598720\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.26.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76D03667-90A8-4277-8C5E-E2601EF6DAA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.26.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F15238C6-62BA-40F8-9362-F0B7FAF38915\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.27.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FDD2D7F-CB2A-47EF-886C-BA243E332C97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.27.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04F1B087-FE60-4B95-9BCF-F5BAA8CEE3A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.27.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5404F24C-F227-4F93-9036-D809CF29B6F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.28.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"199BCC71-C530-4BB7-9E25-C1119A6E5F51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.28.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EF88310-4B46-497F-9519-A1FFFF31D6A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.28.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1133B63-F6A0-4A56-B544-828B751D728A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.28.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C92CFFB1-A4E0-49C2-84F4-784E10E5EBEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.29.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A539983F-E03E-44F7-92FE-5D18ACEB9872\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.29.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C2C10A9-B0C5-41CF-98A2-C127E98F8CC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.29.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAB24400-3E42-45B3-AC58-62638E419141\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.29.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54E14F84-F751-455E-ADE8-BDABD146B31A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.30.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A69F1814-1D94-47AB-AD50-2B1F042DCA0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.30.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"175E697B-FC1D-483B-9235-9162534FB093\"}]}]}],\"references\":[{\"url\":\"http://www.debian.org/security/2017/dsa-3872\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/98744\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1038579\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1364\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1365\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1567\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1712\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://hg.mozilla.org/projects/nss/rev/55ea60effd0d\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.debian.org/security/2017/dsa-3872\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/98744\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1038579\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1364\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1365\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1567\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1712\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://hg.mozilla.org/projects/nss/rev/55ea60effd0d\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.