CVE-2017-7502
30.05.2017, 18:29
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | network_security_services | 3.24.0 |
| mozilla | network_security_services | 3.25.0 |
| mozilla | network_security_services | 3.25.1 |
| mozilla | network_security_services | 3.26.0 |
| mozilla | network_security_services | 3.26.2 |
| mozilla | network_security_services | 3.27.0 |
| mozilla | network_security_services | 3.27.1 |
| mozilla | network_security_services | 3.27.2 |
| mozilla | network_security_services | 3.28.0 |
| mozilla | network_security_services | 3.28.1 |
| mozilla | network_security_services | 3.28.2 |
| mozilla | network_security_services | 3.28.3 |
| mozilla | network_security_services | 3.29.0 |
| mozilla | network_security_services | 3.29.1 |
| mozilla | network_security_services | 3.29.2 |
| mozilla | network_security_services | 3.29.3 |
| mozilla | network_security_services | 3.30.0 |
| mozilla | network_security_services | 3.30.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| nss |
| ||||
| nss-devel |
| ||||
| nss-pkcs11-devel |
| ||||
| nss-sysinit |
| ||||
| nss-tools |
|
Common Weakness Enumeration
References