CVE-2015-7575 Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TL...
MediumCVSS 5.9
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gnutls28(Debian:12) | < 3.3.15-1 | 3.3.15-1 |
| debian/gnutls28(Debian:13) | < 3.3.15-1 | 3.3.15-1 |
| debian/gnutls28(Debian:14) | < 3.3.15-1 | 3.3.15-1 |
| debian/nss(Debian:12) | < 2:3.21-1 | 2:3.21-1 |
| debian/nss(Debian:13) | < 2:3.21-1 | 2:3.21-1 |
| debian/nss(Debian:14) | < 2:3.21-1 | 2:3.21-1 |
| debian/openssl(Debian:12) | < 1.0.1f-1 | 1.0.1f-1 |
| debian/openssl(Debian:13) | < 1.0.1f-1 | 1.0.1f-1 |
| debian/openssl(Debian:14) | < 1.0.1f-1 | 1.0.1f-1 |
| mozilla network security services | <= 3.20.1 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| mozilla Firefox | = 38.0 | No fix listed |
| mozilla Firefox | = 38.0.1 | No fix listed |
| mozilla Firefox | = 38.0.5 | No fix listed |
| mozilla Firefox | = 38.1.0 | No fix listed |
| mozilla Firefox | = 38.1.1 | No fix listed |
| mozilla Firefox | = 38.2.0 | No fix listed |
| mozilla Firefox | = 38.2.1 | No fix listed |
| mozilla Firefox | = 38.3.0 | No fix listed |
| mozilla Firefox | = 38.4.0 | No fix listed |
| mozilla Firefox | = 38.5.0 | No fix listed |
| mozilla Firefox | = 38.5.1 | No fix listed |
| mozilla Firefox | <= 43.0.1 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
References
- Debian Security Tracker CVE-2015-7575 vendor-advisory
- DSA-3688 vendor-advisory
- DSA-3457 vendor-advisory
- DSA-3491 vendor-advisory
- openSUSE-SU-2016:0272 vendor-advisory
- 1036467 vdb-entry
- GLSA-201701-46 vendor-advisory
- openSUSE-SU-2016:0279 vendor-advisory
- openSUSE-SU-2016:0161 vendor-advisory
- www.oracle.com third-party-advisory
- USN-2884-1 third-party-advisory vendor-advisory
- 79684 vdb-entry
- DSA-3465 vendor-advisory
- developer.mozilla.org vendor-advisory
- www.oracle.com
- www.oracle.com vendor-advisory
- RHSA-2016:1430 vendor-advisory
- bugzilla.mozilla.org issue-tracking
- RHSA-2016:0049 vendor-advisory
- www.oracle.com
- openSUSE-SU-2016:0270 vendor-advisory
- openSUSE-SU-2016:0308 third-party-advisory vendor-advisory
- DSA-3437 vendor-advisory
- RHSA-2016:0053 vendor-advisory
- USN-2904-1 vendor-advisory
- openSUSE-SU-2015:2405 vendor-advisory
- security.netapp.com
- SUSE-SU-2016:0269 vendor-advisory
- DSA-3436 vendor-advisory
- openSUSE-SU-2016:0263 vendor-advisory
- USN-2866-1 vendor-advisory
- SUSE-SU-2016:0256 vendor-advisory
- www.oracle.com third-party-advisory
- 91787 third-party-advisory vdb-entry
- www.mozilla.org vendor-advisory
- RHSA-2016:0055 vendor-advisory
- GLSA-201801-15 vendor-advisory
- RHSA-2016:0054 vendor-advisory
- openSUSE-SU-2016:0488 vendor-advisory
- GLSA-201706-18 vendor-advisory
- USN-2864-1 vendor-advisory
- openSUSE-SU-2016:0162 vendor-advisory
- openSUSE-SU-2016:0605 vendor-advisory
- RHSA-2016:0056 vendor-advisory
- openSUSE-SU-2016:0268 vendor-advisory
- openSUSE-SU-2016:0307 third-party-advisory vendor-advisory
- RHSA-2016:0050 vendor-advisory
- DSA-3458 vendor-advisory
- SUSE-SU-2016:0265 vendor-advisory
- USN-2865-1 vendor-advisory
- 1034541 vdb-entry
- openSUSE-SU-2016:0007 vendor-advisory
- USN-2863-1 vendor-advisory