5
CVSSv2

CVE-2017-7502

Published: 30/05/2017 Updated: 12/02/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla network security services 3.25.0

mozilla network security services 3.29.1

mozilla network security services 3.29.0

mozilla network security services 3.30.0

mozilla network security services 3.29.2

mozilla network security services 3.25.1

mozilla network security services 3.28.1

mozilla network security services 3.26.2

mozilla network security services 3.30.1

mozilla network security services 3.24.0

mozilla network security services 3.27.0

mozilla network security services 3.29.3

mozilla network security services 3.28.0

mozilla network security services 3.27.2

mozilla network security services 3.28.3

mozilla network security services 3.28.2

mozilla network security services 3.27.1

mozilla network security services 3.26.0

Vendor Advisories

Debian Bug report logs - #862958 nss: CVE-2017-5461 CVE-2017-5462 Package: src:nss; Maintainer for src:nss is Maintainers of Mozilla-related packages <team+pkg-mozilla@trackerdebianorg>; Reported by: Raphael Hertzog <hertzog@debianorg> Date: Fri, 19 May 2017 10:48:02 UTC Severity: important Tags: patch, security, ...
Debian Bug report logs - #863839 CVE-2017-7502 Package: nss; Maintainer for nss is Maintainers of Mozilla-related packages <team+pkg-mozilla@trackerdebianorg>; Reported by: Ola Lundqvist <ola@inguzacom> Date: Wed, 31 May 2017 20:03:01 UTC Severity: important Tags: fixed-upstream, patch, security, upstream Found i ...
Synopsis Important: nss security and bug fix update Type/Severity Security Advisory: Important Topic An update for nss is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base sc ...
Synopsis Important: nss security and bug fix update Type/Severity Security Advisory: Important Topic An update for nss is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base sc ...
Synopsis Important: Red Hat 3scale API Management Platform 200 security update Type/Severity Security Advisory: Important Topic A security update for Red Hat 3scale API Management Platform 200 is now available from the Red Hat Container CatalogRed Hat Product Security has rated this update as having a ...
Synopsis Important: Red Hat Container Development Kit 300 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat Container Development Kit 300Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability ...
NSS could be made to crash if it received specially crafted network traffic ...
Several security issues were fixed in NSS ...
Null pointer dereference when handling empty SSLv2 messages:A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages An attacker could use this flaw to crash a server application compiled against the NSS library (CVE-2017-7502) ...