In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1533216 | Exploit Issue Tracking Patch Vendor Advisory |
https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf | Third Party Advisory |
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes | Release Notes Vendor Advisory |
https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
History
19 Feb 2021, 16:58
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:siemens:ruggedcom_rox_rx1512:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:ruggedcom_rox_rx1501_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:ruggedcom_rox_rx1400:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:ruggedcom_rox_rx1510_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:ruggedcom_rox_mx5000_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:ruggedcom_rox_rx1500:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:ruggedcom_rox_rx1500_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:ruggedcom_rox_rx1510:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:ruggedcom_rox_rx5000:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:ruggedcom_rox_rx1512_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:ruggedcom_rox_mx5000:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:ruggedcom_rox_rx1501:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:ruggedcom_rox_rx1511:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:ruggedcom_rox_rx5000_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:ruggedcom_rox_rx1400_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:ruggedcom_rox_rx1511_firmware:*:*:*:*:*:*:*:* |
|
References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf - Third Party Advisory | |
References | (MISC) https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04 - Third Party Advisory, US Government Resource |
12 Feb 2021, 06:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
09 Feb 2021, 14:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2020-10-22 21:15
Updated : 2023-12-10 13:41
NVD link : CVE-2019-17007
Mitre link : CVE-2019-17007
CVE.ORG link : CVE-2019-17007
JSON object : View
Products Affected
siemens
- ruggedcom_rox_rx1501
- ruggedcom_rox_rx1500
- ruggedcom_rox_rx5000
- ruggedcom_rox_mx5000
- ruggedcom_rox_rx1400_firmware
- ruggedcom_rox_rx1511
- ruggedcom_rox_rx1500_firmware
- ruggedcom_rox_rx1510_firmware
- ruggedcom_rox_rx1501_firmware
- ruggedcom_rox_rx1400
- ruggedcom_rox_rx1511_firmware
- ruggedcom_rox_rx1512
- ruggedcom_rox_rx1510
- ruggedcom_rox_mx5000_firmware
- ruggedcom_rox_rx5000_firmware
- ruggedcom_rox_rx1512_firmware
mozilla
- network_security_services
CWE
CWE-295
Improper Certificate Validation