PT-2016-4930
CVE-2016-1938
·
Published
2016-01-26
·
Updated
2024-12-12
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Mozilla Network Security Services (NSS) versions prior to 3.21
Mozilla Firefox versions prior to 44.0
Description
The issue is related to the improper division of numbers in the s mp div function, which might make it easier for remote attackers to defeat cryptographic protection mechanisms. This is achieved by leveraging the use of the mp div or mp exptmod function.
Recommendations
For Mozilla Network Security Services (NSS) versions prior to 3.21, update to version 3.21 or later.
For Mozilla Firefox versions prior to 44.0, update to version 44.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾