5
CVSSv2

CVE-2019-17007

Published: 22/10/2020 Updated: 19/02/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

In Network Security Services prior to 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla network security services

siemens ruggedcom_rox_mx5000_firmware

siemens ruggedcom_rox_rx1400_firmware

siemens ruggedcom_rox_rx1500_firmware

siemens ruggedcom_rox_rx1501_firmware

siemens ruggedcom_rox_rx1510_firmware

siemens ruggedcom_rox_rx1511_firmware

siemens ruggedcom_rox_rx1512_firmware

siemens ruggedcom_rox_rx5000_firmware

Vendor Advisories

NSS could be made to crash if it received a specially crafted certificate ...
Two vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in denial of service and potentially the execution of arbitrary code For the stable distribution (buster), these problems have been fixed in version 2:3421-1+deb10u2 We recommend that you upgrade your nss packages For the detailed security status of ...