CVE-2015-7182
Critical · 9.8CVSS
9.8
EPSS
10.2%
Published
Nov 5, 2015
CISA due date
—
The record
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | nss | 0 | 2:3.20.1-1 |
| Debian:12 | nss | 0 | 2:3.20.1-1 |
| Debian:13 | nss | 0 | 2:3.20.1-1 |
| Debian:6.0 | nss | 0 | 3.12.8-1+squeeze13 |
| Debian:7 | icedove | 0 | 38.4.0-1~deb7u1 |
| Debian:7 | iceweasel | 0 | 38.4.0esr-1~deb7u1 |
| Debian:7 | nss | 0 | 2:3.14.5-1+deb7u6 |
| Debian:8 | icedove | 0 | 38.4.0-1~deb8u1 |
| Debian:8 | iceweasel | 0 | 38.4.0esr-1~deb8u1 |
| Debian:8 | nss | 0 | 2:3.26-1+debu8u1 |
| Mageia:5 | firefox | 0 | 38.4.0-1.mga5 |
| Mageia:5 | firefox-l10n | 0 | 38.4.0-1.mga5 |
| Mageia:5 | nspr | 0 | 4.10.10-1.mga5 |
| Mageia:5 | nss | 0 | 3.20.1-1.mga5 |
| Mageia:5 | rootcerts | 0 | 20151029.00-1.mga5 |
| Red Hat:enterprise_linux:5::client | nspr | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::client | nspr-debuginfo | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::client | nspr-devel | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::client | nss | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client | nss-debuginfo | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client | nss-devel | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client | nss-pkcs11-devel | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client | nss-tools | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | nspr | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | nspr-debuginfo | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | nspr-devel | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | nss | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | nss-debuginfo | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | nss-devel | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | nss-pkcs11-devel | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::client_workstation | nss-tools | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::server | nspr | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::server | nspr-debuginfo | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::server | nspr-devel | 0 | 0:4.10.8-2.el5_11 |
| Red Hat:enterprise_linux:5::server | nss | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::server | nss-debuginfo | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::server | nss-devel | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::server | nss-pkcs11-devel | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:5::server | nss-tools | 0 | 0:3.19.1-2.el5_11 |
| Red Hat:enterprise_linux:6::client | nspr | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::client | nspr-debuginfo | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::client | nspr-devel | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::client | nss | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::client | nss-debuginfo | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::client | nss-devel | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::client | nss-pkcs11-devel | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::client | nss-sysinit | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::client | nss-tools | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::client | nss-util | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::client | nss-util-debuginfo | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::client | nss-util-devel | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nspr | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nspr-debuginfo | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nspr-devel | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss-debuginfo | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss-devel | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss-pkcs11-devel | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss-sysinit | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss-tools | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss-util | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss-util-debuginfo | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::computenode | nss-util-devel | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::server | nspr | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::server | nspr-debuginfo | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::server | nspr-devel | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::server | nss | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::server | nss-debuginfo | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::server | nss-devel | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::server | nss-pkcs11-devel | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::server | nss-sysinit | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::server | nss-tools | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::server | nss-util | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::server | nss-util-debuginfo | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::server | nss-util-devel | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nspr | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nspr-debuginfo | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nspr-devel | 0 | 0:4.10.8-2.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss-debuginfo | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss-devel | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss-pkcs11-devel | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss-sysinit | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss-tools | 0 | 0:3.19.1-5.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss-util | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss-util-debuginfo | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:6::workstation | nss-util-devel | 0 | 0:3.19.1-2.el6_7 |
| Red Hat:enterprise_linux:7::client | nspr | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::client | nspr-debuginfo | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::client | nspr-devel | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::client | nss | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::client | nss-debuginfo | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::client | nss-devel | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::client | nss-pkcs11-devel | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::client | nss-sysinit | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::client | nss-tools | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::client | nss-util | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:enterprise_linux:7::client | nss-util-debuginfo | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:enterprise_linux:7::client | nss-util-devel | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:enterprise_linux:7::computenode | nspr | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::computenode | nspr-debuginfo | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::computenode | nspr-devel | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::computenode | nss | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | nss-debuginfo | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | nss-devel | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | nss-pkcs11-devel | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | nss-sysinit | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | nss-tools | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | nss-util | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:enterprise_linux:7::computenode | nss-util-debuginfo | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:enterprise_linux:7::computenode | nss-util-devel | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:enterprise_linux:7::server | nspr | 0 | 0:4.10.8-2.ael7b_1 |
| Red Hat:enterprise_linux:7::server | nspr-debuginfo | 0 | 0:4.10.8-2.ael7b_1 |
| Red Hat:enterprise_linux:7::server | nspr-devel | 0 | 0:4.10.8-2.ael7b_1 |
| Red Hat:enterprise_linux:7::server | nss | 0 | 0:3.19.1-7.ael7b_1.2 |
| Red Hat:enterprise_linux:7::server | nss-debuginfo | 0 | 0:3.19.1-7.ael7b_1.2 |
| Red Hat:enterprise_linux:7::server | nss-devel | 0 | 0:3.19.1-7.ael7b_1.2 |
| Red Hat:enterprise_linux:7::server | nss-pkcs11-devel | 0 | 0:3.19.1-7.ael7b_1.2 |
| Red Hat:enterprise_linux:7::server | nss-sysinit | 0 | 0:3.19.1-7.ael7b_1.2 |
| Red Hat:enterprise_linux:7::server | nss-tools | 0 | 0:3.19.1-7.ael7b_1.2 |
| Red Hat:enterprise_linux:7::server | nss-util | 0 | 0:3.19.1-4.ael7b_1 |
| Red Hat:enterprise_linux:7::server | nss-util-debuginfo | 0 | 0:3.19.1-4.ael7b_1 |
| Red Hat:enterprise_linux:7::server | nss-util-devel | 0 | 0:3.19.1-4.ael7b_1 |
| Red Hat:enterprise_linux:7::workstation | nspr | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::workstation | nspr-debuginfo | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::workstation | nspr-devel | 0 | 0:4.10.8-2.el7_1 |
| Red Hat:enterprise_linux:7::workstation | nss | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | nss-debuginfo | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | nss-devel | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | nss-pkcs11-devel | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | nss-sysinit | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | nss-tools | 0 | 0:3.19.1-7.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | nss-util | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:enterprise_linux:7::workstation | nss-util-debuginfo | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:enterprise_linux:7::workstation | nss-util-devel | 0 | 0:3.19.1-4.el7_1 |
| Red Hat:rhel_aus:6.4::server | nspr | 0 | 0:4.9.5-5.el6_4 |
| Red Hat:rhel_aus:6.4::server | nspr-debuginfo | 0 | 0:4.9.5-5.el6_4 |
| Red Hat:rhel_aus:6.4::server | nspr-devel | 0 | 0:4.9.5-5.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss | 0 | 0:3.14.3-9.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss-debuginfo | 0 | 0:3.14.3-9.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss-devel | 0 | 0:3.14.3-9.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss-pkcs11-devel | 0 | 0:3.14.3-9.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss-sysinit | 0 | 0:3.14.3-9.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss-tools | 0 | 0:3.14.3-9.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss-util | 0 | 0:3.14.3-7.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss-util-debuginfo | 0 | 0:3.14.3-7.el6_4 |
| Red Hat:rhel_aus:6.4::server | nss-util-devel | 0 | 0:3.14.3-7.el6_4 |
| Red Hat:rhel_eus:6.5::computenode | nspr | 0 | 0:4.10.6-2.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nspr-debuginfo | 0 | 0:4.10.6-2.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nspr-devel | 0 | 0:4.10.6-2.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss-debuginfo | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss-devel | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss-pkcs11-devel | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss-sysinit | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss-tools | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss-util | 0 | 0:3.16.1-3.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss-util-debuginfo | 0 | 0:3.16.1-3.el6_5 |
| Red Hat:rhel_eus:6.5::computenode | nss-util-devel | 0 | 0:3.16.1-3.el6_5 |
| Red Hat:rhel_eus:6.5::server | nspr | 0 | 0:4.10.6-2.el6_5 |
| Red Hat:rhel_eus:6.5::server | nspr-debuginfo | 0 | 0:4.10.6-2.el6_5 |
| Red Hat:rhel_eus:6.5::server | nspr-devel | 0 | 0:4.10.6-2.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss-debuginfo | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss-devel | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss-pkcs11-devel | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss-sysinit | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss-tools | 0 | 0:3.16.1-9.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss-util | 0 | 0:3.16.1-3.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss-util-debuginfo | 0 | 0:3.16.1-3.el6_5 |
| Red Hat:rhel_eus:6.5::server | nss-util-devel | 0 | 0:3.16.1-3.el6_5 |
| Red Hat:rhel_eus:6.6::computenode | nspr | 0 | 0:4.10.8-2.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nspr-debuginfo | 0 | 0:4.10.8-2.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nspr-devel | 0 | 0:4.10.8-2.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss-debuginfo | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss-devel | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss-pkcs11-devel | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss-sysinit | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss-tools | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss-util | 0 | 0:3.19.1-2.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss-util-debuginfo | 0 | 0:3.19.1-2.el6_6 |
| Red Hat:rhel_eus:6.6::computenode | nss-util-devel | 0 | 0:3.19.1-2.el6_6 |
| Red Hat:rhel_eus:6.6::server | nspr | 0 | 0:4.10.8-2.el6_6 |
| Red Hat:rhel_eus:6.6::server | nspr-debuginfo | 0 | 0:4.10.8-2.el6_6 |
| Red Hat:rhel_eus:6.6::server | nspr-devel | 0 | 0:4.10.8-2.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss-debuginfo | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss-devel | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss-pkcs11-devel | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss-sysinit | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss-tools | 0 | 0:3.19.1-4.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss-util | 0 | 0:3.19.1-2.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss-util-debuginfo | 0 | 0:3.19.1-2.el6_6 |
| Red Hat:rhel_eus:6.6::server | nss-util-devel | 0 | 0:3.19.1-2.el6_6 |
| Red Hat:rhel_mission_critical:6.2::server | nspr | 0 | 0:4.8.9-6.el6_2 |
| Red Hat:rhel_mission_critical:6.2::server | nspr-debuginfo | 0 | 0:4.8.9-6.el6_2 |
| Red Hat:rhel_mission_critical:6.2::server | nspr-devel | 0 | 0:4.8.9-6.el6_2 |
| Red Hat:rhel_mission_critical:6.2::server | nss | 0 | 0:3.13.1-12.el6_2 |
| Red Hat:rhel_mission_critical:6.2::server | nss-debuginfo | 0 | 0:3.13.1-12.el6_2 |
Related vulnerabilities
- CVE-2024-7531 Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and… Also affects nss
- CVE-2024-6609 When almost out-of-memory an elliptic curve key which was never allocated could have been… Also affects nss
- CVE-2024-6602 A mismatch between allocator and deallocator could have lead to memory corruption. Also affects nss
- CVE-2024-0743 An unchecked return value in TLS handshake code could have caused a potentially… Also affects nss
- CVE-2023-6135 Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". Also affects nss
- CVE-2023-4421 The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting… Also affects nss
- CVE-2023-0767 An attacker could construct a PKCS 12 cert bundle in such a way that could allow for… Also affects nss
- CVE-2022-22747 After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the… Also affects nss