CVE-2017-7502 Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
HighCVSS 7.5
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nss(Debian:12) | < 2:3.26.2-1.1 | 2:3.26.2-1.1 |
| debian/nss(Debian:13) | < 2:3.26.2-1.1 | 2:3.26.2-1.1 |
| debian/nss(Debian:14) | < 2:3.26.2-1.1 | 2:3.26.2-1.1 |
| mozilla network security services | = 3.24.0 | No fix listed |
| mozilla network security services | = 3.25.0 | No fix listed |
| mozilla network security services | = 3.25.1 | No fix listed |
| mozilla network security services | = 3.26.0 | No fix listed |
| mozilla network security services | = 3.26.2 | No fix listed |
| mozilla network security services | = 3.27.0 | No fix listed |
| mozilla network security services | = 3.27.1 | No fix listed |
| mozilla network security services | = 3.27.2 | No fix listed |
| mozilla network security services | = 3.28.0 | No fix listed |
| mozilla network security services | = 3.28.1 | No fix listed |
| mozilla network security services | = 3.28.2 | No fix listed |
| mozilla network security services | = 3.28.3 | No fix listed |
| mozilla network security services | = 3.29.0 | No fix listed |
| mozilla network security services | = 3.29.1 | No fix listed |
| mozilla network security services | = 3.29.2 | No fix listed |
| mozilla network security services | = 3.29.3 | No fix listed |
| mozilla network security services | = 3.30.0 | No fix listed |
| mozilla network security services | = 3.30.1 | No fix listed |
| NSS project nss | = since 3.24.0 | No fix listed |
References
- Debian Security Tracker CVE-2017-7502 vendor-advisory
- DSA-3872 vendor-advisory
- www.oracle.com
- 98744 third-party-advisory vdb-entry
- 1038579 vdb-entry
- RHSA-2017:1364 vendor-advisory
- RHSA-2017:1365 vendor-advisory
- RHSA-2017:1567 vendor-advisory
- RHSA-2017:1712 vendor-advisory
- hg.mozilla.org patch
- bugs.debian.org issue-tracking