PT-2016-1439
CVE-2016-1978
·
تاريخ النشر
2016-01-26
·
تاريخ التحديث
2017-11-04
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Network Security Services (NSS) versions prior to 3.21
Mozilla Firefox versions prior to 44.0
Description
A use-after-free issue in the ssl3 HandleECDHServerKeyExchange function allows remote attackers to cause a denial of service or possibly have other impacts by making an SSL handshake at a time of high memory consumption. This can occur during (1) DHE or (2) ECDHE handshake.
Recommendations
For Mozilla Network Security Services (NSS) versions prior to 3.21, update to version 3.21 or later.
For Mozilla Firefox versions prior to 44.0, update to version 44.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾