CVE-2016-2834

Published: Jun 13, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.

Affected (15)

Products: Canonical: Ubuntu Linux · Opensuse: Leap, Opensuse · Mozilla: Network Security Services, Firefox · +1 more

Show all products

Canonical: Ubuntu Linux · Opensuse: Leap, Opensuse · Mozilla: Network Security Services, Firefox · Novell: Suse Linux Enterprise Desktop, Suse Linux Enterprise Server, Suse Linux Enterprise Software Development Kit

1 product

2 products

2 products

Network Security Services

3 products

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Suse Linux Enterprise Software Development Kit

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Network Security Services	Up to 3.22

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 46.0.1

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Desktop	Version 12.0
Novell Suse Linux Enterprise Desktop	Version 12.0 sp1
Novell Suse Linux Enterprise Server	Version 12.0
Novell Suse Linux Enterprise Server	Version 12.0 sp1
Novell Suse Linux Enterprise Software Development Kit	Version 12.0
Novell Suse Linux Enterprise Software Development Kit	Version 12.0 sp1

References (34)

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html

Source: security@mozilla.org

http://rhn.redhat.com/errata/RHSA-2016-2779.html

Source: security@mozilla.org

http://www.debian.org/security/2016/dsa-3688

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2016/mfsa2016-61.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Source: security@mozilla.org

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: security@mozilla.org

http://www.securityfocus.com/bid/91072

Source: security@mozilla.org

http://www.securitytracker.com/id/1036057

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-2993-1

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-3029-1

Source: security@mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1206283

Source: security@mozilla.org

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=1221620

Source: security@mozilla.org

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=1241034

Source: security@mozilla.org

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=1241037

Source: security@mozilla.org

Issue Tracking

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.23_release_notes

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-2779.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2016/dsa-3688

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2016/mfsa2016-61.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/91072

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1036057

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2993-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-3029-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=1206283

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=1221620

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=1241034

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=1241037

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.23_release_notes

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.