Published: 22/10/2020 Updated: 18/02/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

In Network Security Services (NSS) prior to 3.36.7 and prior to 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla network security services
siemens ruggedcom_rox_mx5000_firmware
siemens ruggedcom_rox_rx1400_firmware
siemens ruggedcom_rox_rx1500_firmware
siemens ruggedcom_rox_rx1501_firmware
siemens ruggedcom_rox_rx1510_firmware
siemens ruggedcom_rox_rx1511_firmware
siemens ruggedcom_rox_rx1512_firmware
siemens ruggedcom_rox_rx5000_firmware

Synopsis Moderate: nss and nspr security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for nss and nspr is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability ...

Debian Bug report logs - #921614 nss: CVE-2018-18508: NULL pointer dereference in several CMS functions resulting in a denial of service Package: src:nss; Maintainer for src:nss is Maintainers of Mozilla-related packages <team+pkg-mozilla@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: ...

NSS could be made to crash if it received specially crafted network traffic ...

CWE-476 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04 https://access.redhat.com/errata/RHSA-2019:1951 https://nvd.nist.gov https://usn.ubuntu.com/3898-1/

CVE-2018-18508

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect