Skip to content

CVE-2016-5285 A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote ma...

HighCVSS 7.5 EPSS 2.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

Affected products

ProductAffected versionsFixed in
debian/nss(Debian:12) < 2:3.25-1 2:3.25-1
debian/nss(Debian:13) < 2:3.25-1 2:3.25-1
debian/nss(Debian:14) < 2:3.25-1 2:3.25-1
mozilla nss < 3.26 3.26
debian linux = 8.0 No fix listed
debian linux = 9.0 No fix listed
debian linux = 10.0 No fix listed
redhat enterprise linux = 5.0 No fix listed
redhat enterprise linux = 6.0 No fix listed
redhat enterprise linux = 7.0 No fix listed
SUSE linux enterprise server = 11-sp2 No fix listed
avaya aura application enablement services >= 6.1, <= 6.3.3 No fix listed
avaya aura application enablement services = 7.0 No fix listed
avaya aura application server 5300 = 3.0 No fix listed
avaya aura application server 5300 = 3.0-sp1 No fix listed
avaya aura application server 5300 = 3.0-sp10 No fix listed
avaya aura application server 5300 = 3.0-sp10.1 No fix listed
avaya aura application server 5300 = 3.0-sp11 No fix listed
avaya aura application server 5300 = 3.0-sp11.1 No fix listed
avaya aura application server 5300 = 3.0-sp12 No fix listed
avaya aura application server 5300 = 3.0-sp12.1 No fix listed
avaya aura application server 5300 = 3.0-sp12.2 No fix listed
avaya aura application server 5300 = 3.0-sp12.3 No fix listed
avaya aura application server 5300 = 3.0-sp12.5 No fix listed
avaya aura application server 5300 = 3.0-sp3 No fix listed
Show 78 more
ProductAffected versionsFixed in
avaya aura application server 5300 = 3.0-sp5 No fix listed
avaya aura application server 5300 = 3.0-sp7 No fix listed
avaya aura communication manager >= 6.0, <= 6.3.117.0 No fix listed
avaya aura communication manager = 7.0 No fix listed
avaya aura communication manager = 7.0-sp No fix listed
avaya aura communication manager = 7.0-sp3 No fix listed
avaya aura communication manager messagint = 7.0 No fix listed
avaya aura communication manager messagint = 7.0-sp1 No fix listed
avaya breeze platform >= 3.0, <= 3.2 No fix listed
avaya call management system >= 18.0.0.1, <= 18.0.0.2 No fix listed
avaya call management system = 17.0 No fix listed
avaya call management system = 17.0-r3 No fix listed
avaya call management system = 17.0-r4 No fix listed
avaya call management system = 17.0-r5 No fix listed
avaya call management system = 17.0-r6 No fix listed
avaya iq = 5.2.x No fix listed
avaya cs1000e firmware >= 7.0, <= 7.6 No fix listed
avaya cs1000m firmware >= 7.0, <= 7.6 No fix listed
avaya cs1000ecs1000m signaling server firmware >= 7.0, <= 7.6 No fix listed
avaya aura conferencing = 7.0 No fix listed
avaya aura conferencing = 7.2 No fix listed
avaya aura conferencing = 8.0 No fix listed
avaya aura conferencing = 8.0-sp2 No fix listed
avaya aura conferencing = 8.0-sp4 No fix listed
avaya aura conferencing = 8.0-sp5 No fix listed
avaya aura conferencing = 8.0-sp7 No fix listed
avaya aura conferencing = 8.0-sp8 No fix listed
avaya aura conferencing = 8.0-sp9 No fix listed
avaya aura experience portal >= 6.0, <= 7.1 No fix listed
avaya ip office = 8.1 No fix listed
avaya ip office = 9.1 No fix listed
avaya ip office = 9.1-sp1 No fix listed
avaya ip office = 9.1-sp10 No fix listed
avaya ip office = 9.1-sp11 No fix listed
avaya ip office = 9.1-sp12 No fix listed
avaya ip office = 9.1-sp3 No fix listed
avaya ip office = 9.1-sp4 No fix listed
avaya ip office = 9.1-sp5 No fix listed
avaya ip office = 9.1-sp6 No fix listed
avaya ip office = 9.1-sp7 No fix listed
avaya ip office = 9.1-sp8 No fix listed
avaya ip office = 9.1-sp9 No fix listed
avaya ip office = 10.0 No fix listed
avaya ip office = 10.0-sp1 No fix listed
avaya ip office = 10.0-sp2 No fix listed
avaya ip office = 10.0-sp3 No fix listed
avaya ip office = 10.0-sp4 No fix listed
avaya ip office = 10.0-sp5 No fix listed
avaya ip office = 10.0-sp6 No fix listed
avaya ip office = 10.0-sp7 No fix listed
avaya aura messaging = 6.3 No fix listed
avaya aura messaging = 6.3.3 No fix listed
avaya aura messaging = 6.3.3-sp4 No fix listed
avaya aura messaging = 6.3.3-sp5 No fix listed
avaya aura messaging = 6.3.3-sp6 No fix listed
avaya aura session manager >= 6.3, <= 6.3.18 No fix listed
avaya aura session manager = 7.0 No fix listed
avaya aura session manager = 7.0-sp1 No fix listed
avaya aura session manager = 7.0-sp2 No fix listed
avaya aura session manager = 7.0.1 No fix listed
avaya aura session manager = 7.0.1-sp1 No fix listed
avaya aura session manager = 7.0.1-sp2 No fix listed
avaya aura system manager >= 6.3, <= 6.3.18 No fix listed
avaya aura system manager >= 7.0, <= 7.0.1.3 No fix listed
avaya aura utility services >= 6.3, <= 6.3.14 No fix listed
avaya aura utility services >= 7.0, <= 7.0.1.2 No fix listed
avaya meeting exchange = 6.2 No fix listed
avaya meeting exchange = 6.2-sp3 No fix listed
avaya message networking >= 5.2, <= 6.3 No fix listed
avaya one-x client enablement services = 6.2 No fix listed
avaya one-x client enablement services = 6.2-sp1 No fix listed
avaya one-x client enablement services = 6.2-sp2 No fix listed
avaya one-x client enablement services = 6.2-sp5 No fix listed
avaya proactive contact >= 5.0, <= 5.1.2 No fix listed
avaya session border controller for enterprise firmware >= 6.2, <= 6.3 No fix listed
avaya session border controller for enterprise firmware >= 7.0, <= 7.1 No fix listed
avaya aura system platform firmware >= 6.3, <= 6.4.0 No fix listed
mozilla network security services = 3.24 No fix listed

References