CVE-2016-1938 The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for...
MediumCVSS 6.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nss(Debian:12) | < 2:3.21-1 | 2:3.21-1 |
| debian/nss(Debian:13) | < 2:3.21-1 | 2:3.21-1 |
| debian/nss(Debian:14) | < 2:3.21-1 | 2:3.21-1 |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| mozilla nss | <= 3.20.1 | No fix listed |
| mozilla Firefox | <= 43.0.4 | No fix listed |
References
- Debian Security Tracker CVE-2016-1938 vendor-advisory
- openSUSE-SU-2016:0306 third-party-advisory vendor-advisory
- openSUSE-SU-2016:0309 third-party-advisory vendor-advisory
- SUSE-SU-2016:0338 vendor-advisory
- DSA-3688 vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- 81955 vdb-entry
- 91787 third-party-advisory vdb-entry
- 1034825 vdb-entry
- USN-2880-1 vendor-advisory
- USN-2880-2 vendor-advisory
- USN-2903-1 vendor-advisory
- USN-2903-2 vendor-advisory
- USN-2973-1 vendor-advisory
- blog.fuzzing-project.org
- bugzilla.mozilla.org issue-tracking
- bugzilla.mozilla.org issue-tracking
- developer.mozilla.org vendor-advisory
- github.com
- github.com
- hg.mozilla.org
- GLSA-201605-06 vendor-advisory
- GLSA-201701-46 vendor-advisory