DeutschShown in its original language — a full translation is planned for a future version.
Mozilla NSS: Schwachstelle ermöglicht Codeausführung
view advisory published 2021-12-01
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mozilla NSS ausnutzen, um beliebigen Programmcode auszuführen oder um die betreffende Anwendung zum Absturz zu bringen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43527US | critical9.8 | — | ||
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS f… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-9591 vom 2021-12-07external
- Red Hat Security Advisory RHSA-2021:4903 vom 2021-12-01external
- Red Hat Security Advisory RHSA-2021:4904 vom 2021-12-01external
- Red Hat Security Advisory RHSA-2021:4907 vom 2021-12-02external
- Red Hat Security Advisory RHSA-2021:4909 vom 2021-12-02external
- Red Hat Security Advisory RHSA-2021:4919 vom 2021-12-02external
- Red Hat Security Advisory RHSA-2021:4932 vom 2021-12-06external
- Red Hat Security Advisory RHSA-2021:4933 vom 2021-12-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan