CVE-2016-5285
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
Affected (99)
Show all products
Mozilla: Nss · Debian: Debian Linux · Redhat: Enterprise Linux · Suse: Linux Enterprise Server · Avaya: Aura Application Enablement Services, Aura Application Server 5300, Aura Communication Manager, Aura Communication Manager Messagint, Breeze Platform, Call Management System, Iq, Cs1000e Firmware, Cs1000m Firmware, Cs1000e/cs1000m Signaling Server Firmware, Aura Conferencing, Aura Experience Portal, Ip Office, Aura Messaging, Aura Session Manager, Aura System Manager, Aura Utility Services, Meeting Exchange, Message Networking, One X Client Enablement Services, Proactive Contact, Session Border Controller For Enterprise Firmware, Aura System Platform Firmware
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11 sp2 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.1 to 6.3.3 | |
| Version 3.0 | |
| From 6.0 to 6.3.117.0 | |
| Version 7.0 | |
| From 3.0 to 3.2 | |
| From 18.0.0.1 to 18.0.0.2 | |
| Version 5.2.x |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 7.0 to 7.6 |
| Running on/with | Platform Versions |
|---|---|
Avaya Cs1000e | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 7.0 to 7.6 |
| Running on/with | Platform Versions |
|---|---|
Avaya Cs1000m | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| From 7.0 to 7.6 |
| Running on/with | Platform Versions |
|---|---|
Avaya Cs1000e/cs1000m Signaling Server | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.0 | |
| From 6.0 to 7.1 |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.3.3 | |
| From 6.3 to 6.3.18 | |
| From 6.3 to 6.3.18 | |
| From 6.3 to 6.3.14 | |
| Version 6.2 | |
| From 5.2 to 6.3 | |
| Version 6.2 | |
| From 5.0 to 5.1.2 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.2 to 6.3 |
| Running on/with | Platform Versions |
|---|---|
Avaya Session Border Controller For Enterprise | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.3 to 6.4.0 |
| Running on/with | Platform Versions |
|---|---|
Avaya Aura System Platform | All versions |
Related CWEs
References (18)
Source: security@mozilla.org
Source: security@mozilla.org
Source: security@mozilla.org
Mailing ListThird Party Advisory
Source: security@mozilla.org
Source: security@mozilla.org
Source: security@mozilla.org
Source: security@mozilla.org
Source: security@mozilla.org
Source: security@mozilla.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.