// For flags

CVE-2016-1979

nss: Use-after-free during processing of DER encoded keys in NSS (MFSA 2016-36)

Severity Score

8.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.

Vulnerabilidad de uso después de liberación de memoria en la función PK11_ImportDERPrivateKeyInfoAndReturnKey en Mozilla Network Security Services (NSS) en versiones anteriores a 3.21.1, como se utiliza en Mozilla Firefox en versiones anteriores a 45.0, permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de datos de clave manipulados con codificado DER.

A use-after-free flaw was found in the way NSS processed certain DER (Distinguished Encoding Rules) encoded cryptographic keys. An attacker could use this flaw to create a specially crafted DER encoded certificate which, when parsed by an application compiled against the NSS library, could cause that application to crash, or execute arbitrary code using the permissions of the user running the application.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
Attack Vector
Network
Attack Complexity
High
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-01-20 CVE Reserved
  • 2016-03-13 CVE Published
  • 2023-10-30 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (25)
URL Tag Source
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html X_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html X_refsource_confirm
http://www.securityfocus.com/bid/84221 Vdb Entry
http://www.securitytracker.com/id/1035215 Vdb Entry
https://bto.bluecoat.com/security-advisory/sa124 X_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=1185033 X_refsource_confirm
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes X_refsource_misc
URL Date SRC
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html 2017-11-04
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html 2017-11-04
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html 2017-11-04
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html 2017-11-04
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html 2017-11-04
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html 2017-11-04
http://rhn.redhat.com/errata/RHSA-2016-0591.html 2017-11-04
http://rhn.redhat.com/errata/RHSA-2016-0684.html 2017-11-04
http://rhn.redhat.com/errata/RHSA-2016-0685.html 2017-11-04
http://www.debian.org/security/2016/dsa-3576 2017-11-04
http://www.debian.org/security/2016/dsa-3688 2017-11-04
http://www.mozilla.org/security/announce/2016/mfsa2016-36.html 2017-11-04
http://www.ubuntu.com/usn/USN-2973-1 2017-11-04
https://security.gentoo.org/glsa/201605-06 2017-11-04
https://access.redhat.com/security/cve/CVE-2016-1979 2016-04-25
https://bugzilla.redhat.com/show_bug.cgi?id=1315202 2016-04-25
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Mozilla
Search vendor "Mozilla"
 Firefox
Search vendor "Mozilla" for product "Firefox"
 <= 44.0.2
Search vendor "Mozilla" for product "Firefox" and version " <= 44.0.2"
-
Affected
in Mozilla
Search vendor "Mozilla"
 Network Security Services
Search vendor "Mozilla" for product "Network Security Services"
 <= 3.21
Search vendor "Mozilla" for product "Network Security Services" and version " <= 3.21"
-
Affected