ISOMAN

CVE

CVE-2016-1950

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.

Severity
HIGH
CVSS
8.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Oracle Linux7.9 x86_64 server dvdunknownsource
Oracle Linux7.9 x86_64 server bootunknownsource
Oracle Linux7.9 x86_64 server uek-bootunknownsource
Oracle Linux7.9 source source-dvd1unknownsource
Oracle Linux7.9 source source-dvd2unknownsource
Oracle Linux7.8 x86_64 server dvdunknownsource
Oracle Linux7.8 x86_64 server bootunknownsource
Oracle Linux7.8 x86_64 server uek-bootunknownsource
Oracle Linux7.8 source source-dvd1unknownsource
Oracle Linux7.8 source source-dvd2unknownsource
Oracle Linux7.7 x86_64 server dvdunknownsource
Oracle Linux7.7 x86_64 server bootunknownsource
Oracle Linux7.7 x86_64 server uek-bootunknownsource
Oracle Linux7.7 source source-dvd1unknownsource
Oracle Linux7.7 source source-dvd2unknownsource
Oracle Linux6.10 x86_64 server dvdunknownsource
Oracle Linux6.10 x86_64 server bootunknownsource
Oracle Linux6.10 x86_64 server uek-bootunknownsource
Oracle Linux6.10 source source-dvd1unknownsource
Oracle Linux6.10 source source-dvd2unknownsource
Oracle Linux6.9 x86_64 server dvdunknownsource
Oracle Linux6.9 x86_64 server bootunknownsource
Oracle Linux6.9 x86_64 server uek-bootunknownsource
Oracle Linux6.9 source source-dvd1unknownsource
Oracle Linux6.9 source source-dvd2unknownsource
Oracle Linux6.8 x86_64 server dvdunknownsource
Oracle Linux6.8 x86_64 server bootunknownsource
Oracle Linux6.8 x86_64 server uek-bootunknownsource
Oracle Linux6.8 source source-dvd1unknownsource
Oracle Linux6.8 source source-dvd2unknownsource
Oracle Linux7.9 aarch64 server dvdunknownsource
Oracle Linux7.9 aarch64 server uek-bootunknownsource
Oracle Linux7.8 aarch64 server dvdunknownsource
Oracle Linux7.8 aarch64 server uek-bootunknownsource
Oracle Linux7.7 aarch64 server dvdunknownsource
Oracle Linux7.7 aarch64 server uek-bootunknownsource

References

  1. http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
  2. http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
  3. http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
  4. http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
  5. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
  6. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
  7. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
  8. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
  9. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
  10. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
  11. http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html
  12. http://rhn.redhat.com/errata/RHSA-2016-0495.html
  13. http://www.debian.org/security/2016/dsa-3510
  14. http://www.debian.org/security/2016/dsa-3520
  15. http://www.debian.org/security/2016/dsa-3688
  16. http://www.mozilla.org/security/announce/2016/mfsa2016-35.html
  17. http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
  18. http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
  19. http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
  20. http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html