CVE-2015-5244 The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.
CriticalCVSS 9.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mod nss project mod nss | <= 1.0.11 | No fix listed |
References
- FEDORA-2015-c76c1c84cf third-party-advisory vendor-advisory
- FEDORA-2016-6aa4dd4f3a third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- pagure.io patch third-party-advisory