CVE-2014-1490

EUVD-2014-1566

06.02.2014, 05:44

Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.

Race Condition

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.3 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:C/I:C/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 77%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 < 24.3
mozilla	firefox	𝑥 < 27.0
mozilla	network_security_services	𝑥 < 3.15.4
mozilla	seamonkey	𝑥 < 2.24
mozilla	thunderbird	𝑥 < 24.3.0
oracle	enterprise_manager_ops_center	𝑥 < 12.1.4
oracle	enterprise_manager_ops_center	12.2.0
oracle	enterprise_manager_ops_center	12.2.1
oracle	enterprise_manager_ops_center	12.3.0
oracle	vm_server	3.2
opensuse	opensuse	11.4
opensuse	opensuse	12.3
opensuse	opensuse	13.1
debian	debian_linux	7.0
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	12.10
canonical	ubuntu_linux	13.10

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

nss

bookworm	2:3.87.1-1 fixed
bullseye	2:3.61-1+deb11u3 fixed
bullseye (security)	2:3.61-1+deb11u4 fixed
sid	2:3.105-2 fixed
squeeze	no-dsa
trixie	2:3.105-2 fixed
wheezy	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

firefox

lucid	ignored
precise	Fixed 27.0+build1-0ubuntu0.12.04.1 released
quantal	Fixed 27.0+build1-0ubuntu0.12.10.1 released
saucy	Fixed 27.0+build1-0ubuntu0.13.10.1 released

nss

lucid	not-affected
precise	not-affected
quantal	not-affected
saucy	not-affected

thunderbird

lucid	ignored
precise	Fixed 1:24.3.0+build2-0ubuntu0.12.04.1 released
quantal	Fixed 1:24.3.0+build2-0ubuntu0.12.10.1 released
saucy	Fixed 1:24.3.0+build2-0ubuntu0.13.10.1 released

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html

http://osvdb.org/102876

http://seclists.org/fulldisclosure/2014/Dec/23

http://secunia.com/advisories/56706

http://secunia.com/advisories/56767

http://secunia.com/advisories/56787

http://secunia.com/advisories/56858

http://secunia.com/advisories/56888

http://secunia.com/advisories/56922

http://www.debian.org/security/2014/dsa-2858

http://www.mozilla.org/security/announce/2014/mfsa2014-12.html

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.securityfocus.com/archive/1/534161/100/0/threaded

http://www.securityfocus.com/bid/65335

http://www.securitytracker.com/id/1029717

http://www.securitytracker.com/id/1029720

http://www.securitytracker.com/id/1029721

http://www.ubuntu.com/usn/USN-2102-1

http://www.ubuntu.com/usn/USN-2102-2

http://www.ubuntu.com/usn/USN-2119-1

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

https://8pecxstudios.com/?page_id=44080

https://bugzilla.mozilla.org/show_bug.cgi?id=930857

https://bugzilla.mozilla.org/show_bug.cgi?id=930874

https://exchange.xforce.ibmcloud.com/vulnerabilities/90885

https://security.gentoo.org/glsa/201504-01

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html

http://osvdb.org/102876

http://seclists.org/fulldisclosure/2014/Dec/23

http://secunia.com/advisories/56706

http://secunia.com/advisories/56767

http://secunia.com/advisories/56787

http://secunia.com/advisories/56858

http://secunia.com/advisories/56888

http://secunia.com/advisories/56922

http://www.debian.org/security/2014/dsa-2858

http://www.mozilla.org/security/announce/2014/mfsa2014-12.html

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.securityfocus.com/archive/1/534161/100/0/threaded

http://www.securityfocus.com/bid/65335

http://www.securitytracker.com/id/1029717

http://www.securitytracker.com/id/1029720

http://www.securitytracker.com/id/1029721

http://www.ubuntu.com/usn/USN-2102-1

http://www.ubuntu.com/usn/USN-2102-2

http://www.ubuntu.com/usn/USN-2119-1

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

https://8pecxstudios.com/?page_id=44080

https://bugzilla.mozilla.org/show_bug.cgi?id=930857

https://bugzilla.mozilla.org/show_bug.cgi?id=930874

https://exchange.xforce.ibmcloud.com/vulnerabilities/90885

https://security.gentoo.org/glsa/201504-01