Antoine Delignat-Lavaud

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.11 **Description** The issue is related to the TLS Handshake Protocol implementation in Secure Transport, which accepts a Certificate Request message within a session where no Server Key Exchange message has been sent. This allows remote attackers to have an unspecified impact via crafted TLS data. The vulnerability is also described as being related to errors in the key exchange procedure, which can be exploited by a remote attacker to compromise information security. **Recommendations** For Apple OS X versions prior to 10.11, update to version 10.11 or later to resolve the issue. As a temporary workaround, consider restricting the use of TLS connections to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.11 **Description** The issue is related to the X.509 certificate-trust implementation, which does not properly handle revocation checking. This makes it easier for attackers to conduct man-in-the-middle attacks by using a revoked certificate. The vulnerability can be exploited by a remote attacker to spoof endpoints. **Recommendations** For Apple OS X versions prior to 10.11, update to version 10.11 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources to minimize the risk of exploitation.

🚨 CVE-2015-1637 Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1067. 🎖@cveNotify

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 8.1.3 Apple TV versions prior to 7.0.3 **Description** The issue concerns the mach port kobject interface in the kernel, which does not properly restrict certain information. This makes it easier for attackers to bypass a security protection mechanism. **Recommendations** For Apple iOS versions prior to 8.1.3, update to version 8.1.3 or later. For Apple TV versions prior to 7.0.3, update to version 7.0.3 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Network Security Services (NSS) versions prior to 3.16.2.4 Mozilla Network Security Services (NSS) versions 3.17.x prior to 3.17.3 **Description** The issue arises from the `definite length decoder` function in `lib/util/quickder.c`, which fails to properly validate the DER encoding of an ASN.1 length. This allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding. The `SEC QuickDERDecodeItem` function improperly handles an arbitrary-length encoding of `0x00`. **Recommendations** For Mozilla Network Security Services (NSS) versions prior to 3.16.2.4, update to version 3.16.2.4 or later. For Mozilla Network Security Services (NSS) versions 3.17.x prior to 3.17.3, update to version 3.17.3 or later.

**Name of the Vulnerable Software and Affected Versions** nginx versions 0.5.6 through 1.7.4 **Description** The issue allows remote attackers with certain privileges to conduct virtual host confusion attacks by reusing a cached SSL session for an unrelated context when the same shared ssl session cache or ssl session ticket key is used for multiple servers. **Recommendations** For versions 0.5.6 through 1.7.4, consider using unique ssl session cache or ssl session ticket key for each server to prevent the reuse of cached SSL sessions across different contexts.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 33.0.1750.117 **Description** The issue concerns the SSLClientSocketNSS::Core::OwnAuthCertHandler function in Google Chrome, which does not prevent changes to server X.509 certificates during renegotiations. This allows remote SSL servers to trigger the use of a new certificate chain by initiating a TLS renegotiation, potentially inconsistent with the user's expectations. **Recommendations** For versions prior to 33.0.1750.117, update to version 33.0.1750.117 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mozilla Network Security Services (NSS) versions prior to 3.15.4 Mozilla Firefox versions prior to 27.0 Firefox ESR 24.x versions prior to 24.3 Thunderbird versions prior to 24.3 SeaMonkey versions prior to 2.24 **Description** The issue makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value. This is due to the improper restriction of public values in Diffie-Hellman key exchanges. **Recommendations** For Mozilla Network Security Services (NSS) versions prior to 3.15.4, update to version 3.15.4 or later. For Mozilla Firefox versions prior to 27.0, update to version 27.0 or later. For Firefox ESR 24.x versions prior to 24.3, update to version 24.3 or later. For Thunderbird versions prior to 24.3, update to version 24.3 or later. For SeaMonkey versions prior to 2.24, update to version 2.24 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 28.0.1500.71 **Description** The HTTPS implementation does not ensure that headers are terminated by r r (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation. **Recommendations** For versions prior to 28.0.1500.71, update to version 28.0.1500.71 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 16.0.2 Firefox ESR versions prior to 10.0.10 Thunderbird versions prior to 16.0.2 Thunderbird ESR versions prior to 10.0.10 SeaMonkey versions prior to 2.13.2 **Description** The issue allows remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack. This attack defeats certain protection mechanisms for the Location object. **Recommendations** For Mozilla Firefox versions prior to 16.0.2, update to version 16.0.2 or later. For Firefox ESR versions prior to 10.0.10, update to version 10.0.10 or later. For Thunderbird versions prior to 16.0.2, update to version 16.0.2 or later. For Thunderbird ESR versions prior to 10.0.10, update to version 10.0.10 or later. For SeaMonkey versions prior to 2.13.2, update to version 2.13.2 or later.