Published: 11/06/2018 Updated: 09/08/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

It exists that NSS incorrectly handled certain invalid Diffie-Hellman keys. A remote attacker could possibly use this flaw to cause NSS to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-5285)

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox esr
mozilla firefox
mozilla thunderbird
debian debian linux 8.0

Several security issues were fixed in NSS ...

Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or bypass of the same-origin policy Also, a man-in-the-middle attack in the addon update mechanism has been fixed For the stable distribution (jess ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors, same-origin policy bypass issues, integer overflows, buffer overflows and use-after-frees may lead to the execution of arbitrary code or denial of service For the stable distribution (jessie), these problems ...

An existing mitigation of timing side-channel attacks is insufficient in some circumstances This issue is addressed in Network Security Services (NSS) 3261 This vulnerability affects Thunderbird < 455, Firefox ESR < 455, and Firefox < 50 ...

Mozilla Foundation Security Advisory 2016-89 Security vulnerabilities fixed in Firefox 50 Announced November 15, 2016 Impact critical Products Firefox Fixed in Firefox 50 ...

Mozilla Foundation Security Advisory 2016-90 Security vulnerabilities fixed in Firefox ESR 455 Announced November 15, 2016 Impact critical Products Firefox ESR Fixed in Firefox ESR 455 ...

Mozilla Foundation Security Advisory 2016-93 Security vulnerabilities fixed in Thunderbird 455 Announced November 18, 2016 Impact critical Products Thunderbird Fixed in Thunderbird 455 ...

CWE-200 https://www.mozilla.org/security/advisories/mfsa2016-93/https://www.mozilla.org/security/advisories/mfsa2016-90/https://www.mozilla.org/security/advisories/mfsa2016-89/https://bugzilla.mozilla.org/show_bug.cgi?id=1293334 https://www.debian.org/security/2016/dsa-3730 https://security.gentoo.org/glsa/201701-46 https://security.gentoo.org/glsa/201701-15 http://www.securitytracker.com/id/1037298 http://www.securityfocus.com/bid/94341 https://usn.ubuntu.com/3163-1/https://nvd.nist.gov

CVE-2016-9074

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect