This security update fixes serious security issues in NSS including arbitrary code execution and remote denial service attacks.

For Debian 7 'wheezy', these problems have been fixed in 3.14.5-1+deb7u6. We recommend you upgrade your nss packages as soon as possible.

CVE-2015-7181

The sec_asn1d_parse_leaf function improperly restricts access to an unspecified data structure.

CVE-2015-7182

Heap-based buffer overflow in the ASN.1 decoder.

CVE-2016-1938

The s_mp_div function in lib/freebl/mpi/mpi.c in improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms.

CVE-2016-1950

Heap-based buffer overflow allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.

CVE-2016-1978

Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption.

CVE-2016-1979

Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues :

Mozilla Firefox was updated to 38.7.0 ESR (bsc#969894), fixing following security issues :

  - MFSA 2016-16/CVE-2016-1952/CVE-2016-1953 Miscellaneous     memory safety hazards (rv:45.0 / rv:38.7)

  - MFSA 2016-17/CVE-2016-1954 Local file overwriting and     potential privilege escalation through CSP reports

  - MFSA 2016-20/CVE-2016-1957 Memory leak in libstagefright     when deleting an array during MP4 processing

  - MFSA 2016-21/CVE-2016-1958 Displayed page address can be     overridden

  - MFSA 2016-23/CVE-2016-1960 Use-after-free in HTML5     string parser

  - MFSA 2016-24/CVE-2016-1961 Use-after-free in SetBody

  - MFSA 2016-25/CVE-2016-1962 Use-after-free when using     multiple WebRTC data channels

  - MFSA 2016-27/CVE-2016-1964 Use-after-free during XML     transformations

  - MFSA 2016-28/CVE-2016-1965 Addressbar spoofing though     history navigation and Location protocol property

  - MFSA 2016-31/CVE-2016-1966 Memory corruption with     malicious NPAPI plugin

  - MFSA 2016-34/CVE-2016-1974 Out-of-bounds read in HTML     parser following a failed allocation

  - MFSA 2016-35/CVE-2016-1950 Buffer overflow during ASN.1     decoding in NSS

  - MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/     CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/     CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/     CVE-2016-2800/CVE-2016-2801/CVE-2016-2802 Font     vulnerabilities in the Graphite 2 library

Mozilla NSPR was updated to version 4.12 (bsc#969894), fixing following bugs :

  - added a PR_GetEnvSecure function, which attempts to     detect if the program is being executed with elevated     privileges, and returns NULL if detected. It is     recommended to use this function in general purpose     library code.

  - fixed a memory allocation bug related to the PR_*printf     functions

  - exported API PR_DuplicateEnvironment, which had already     been added in NSPR 4.10.9

  - added support for FreeBSD aarch64

  - several minor correctness and compatibility fixes

Mozilla NSS was updated to fix security issues (bsc#969894) :

  - MFSA 2016-15/CVE-2016-1978 Use-after-free in NSS during     SSL connections in low memory

  - MFSA 2016-35/CVE-2016-1950 Buffer overflow during ASN.1     decoding in NSS

  - MFSA 2016-36/CVE-2016-1979 Use-after-free during     processing of DER encoded keys in NSS

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues :

Mozilla Firefox was updated to 38.7.0 ESR (bsc#969894)

  - MFSA 2016-16/CVE-2016-1952/CVE-2016-1953 Miscellaneous     memory safety hazards (rv:45.0 / rv:38.7)

  - MFSA 2016-17/CVE-2016-1954 Local file overwriting and     potential privilege escalation through CSP reports

  - MFSA 2016-20/CVE-2016-1957 A memory leak in     libstagefright when deleting an array during MP4     processing was fixed.

  - MFSA 2016-21/CVE-2016-1958 The displayed page address     can be overridden

  - MFSA 2016-23/CVE-2016-1960 A use-after-free in HTML5     string parser was fixed.

  - MFSA 2016-24/CVE-2016-1961 A use-after-free in SetBody     was fixed.

  - MFSA 2016-25/CVE-2016-1962 A use-after-free when using     multiple WebRTC data channels was fixed.

  - MFSA 2016-27/CVE-2016-1964 A use-after-free during XML     transformations was fixed.

  - MFSA 2016-28/CVE-2016-1965 Addressbar spoofing though     history navigation and Location protocol property was     fixed.

  - MFSA 2016-31/CVE-2016-1966 Memory corruption with     malicious NPAPI plugin was fixed.

  - MFSA 2016-34/CVE-2016-1974 A out-of-bounds read in the     HTML parser following a failed allocation was fixed.

  - MFSA 2016-35/CVE-2016-1950 A buffer overflow during     ASN.1 decoding in NSS was fixed.

  - MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/     CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/     CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/     CVE-2016-2800/CVE-2016-2801/CVE-2016-2802 Various font     vulnerabilities were fixed in the embedded Graphite 2     library

Mozilla NSS was updated to fix :

  - MFSA 2016-15/CVE-2016-1978 Use-after-free in NSS during     SSL connections in low memory

  - MFSA 2016-35/CVE-2016-1950 Buffer overflow during ASN.1     decoding in NSS

  - MFSA 2016-36/CVE-2016-1979 Use-after-free during     processing of DER encoded keys in NSS

Mozilla NSPR was updated to version 4.12 (bsc#969894)

  - added a PR_GetEnvSecure function, which attempts to     detect if the program is being executed with elevated     privileges, and returns NULL if detected. It is     recommended to use this function in general purpose     library code.

  - fixed a memory allocation bug related to the PR_*printf     functions

  - exported API PR_DuplicateEnvironment, which had already     been added in NSPR 4.10.9

  - added support for FreeBSD aarch64

  - several minor correctness and compatibility fixes

  - Enable atomic instructions on mips (bmo#1129878)

  - Fix mips assertion failure when creating thread with     custom stack size (bmo#1129968)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201605-06 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Firefox, NSS, NSPR, and       Thunderbird. Please review the CVE identifiers referenced below for       details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information, spoof       the address bar, conduct clickjacking attacks, bypass security       restrictions and protection mechanisms, or have other unspecified       impacts.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities were discovered in NSS, the cryptography library developed by the Mozilla project.

  - CVE-2015-4000     David Adrian et al. reported that it may be feasible to     attack Diffie-Hellman-based cipher suites in certain     circumstances, compromising the confidentiality and     integrity of data encrypted with Transport Layer     Security (TLS).

  - CVE-2015-7181 CVE-2015-7182 CVE-2016-1950     Tyson Smith, David Keeler, and Francis Gabriel     discovered heap-based buffer overflows in the ASN.1 DER     parser, potentially leading to arbitrary code execution.

  - CVE-2015-7575     Karthikeyan Bhargavan discovered that TLS client     implementation accepted MD5-based signatures for TLS 1.2     connections with forward secrecy, weakening the intended     security strength of TLS connections.

  - CVE-2016-1938     Hanno Boeck discovered that NSS miscomputed the result     of integer division for certain inputs. This could     weaken the cryptographic protections provided by NSS.
    However, NSS implements RSA-CRT leak hardening, so RSA     private keys are not directly disclosed by this issue.

  - CVE-2016-1978     Eric Rescorla discovered a use-after-free vulnerability     in the implementation of ECDH-based TLS handshakes, with     unknown consequences.

  - CVE-2016-1979     Tim Taubert discovered a use-after-free vulnerability in     ASN.1 DER processing, with application-specific impact.

  - CVE-2016-2834     Tyson Smith and Jed Davis discovered unspecified     memory-safety bugs in NSS.

In addition, the NSS library did not ignore environment variables in processes which underwent a SUID/SGID/AT_SECURE transition at process start. In certain system configurations, this allowed local users to escalate their privileges.

This update contains further correctness and stability fixes without immediate security impact.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
91242	Debian DLA-480-1 : nss security update	Nessus	Debian Local Security Checks	2016/5/19	2021/1/11	critical
89929	SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0727-1)	Nessus	SuSE Local Security Checks	2016/3/15	2021/1/6	critical
89990	SUSE SLED11 / SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0777-1)	Nessus	SuSE Local Security Checks	2016/3/17	2021/1/6	critical
91379	GLSA-201605-06 : Mozilla Products: Multiple vulnerabilities (Logjam) (SLOTH)	Nessus	Gentoo Local Security Checks	2016/5/31	2022/12/5	critical
93871	Debian DSA-3688-1 : nss - security update (Logjam) (SLOTH)	Nessus	Debian Local Security Checks	2016/10/6	2026/1/22	critical

检测

插件搜索

critical

critical

critical

critical

critical