CVE Vulnerabilities

CVE-2015-2730

Published: Jul 06, 2015 | Modified: Dec 28, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
4.3 MODERATE
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V3
Ubuntu

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Debian_linux Debian 7.0 7.0
Debian_linux Debian 8.0 8.0
Suse_linux_enterprise_desktop Novell 12.0 12.0
Suse_linux_enterprise_server Novell 11 11
Suse_linux_enterprise_server Novell 12.0 12.0
Suse_linux_enterprise_software_development_kit Novell 12.0 12.0
Red Hat Enterprise Linux 5 RedHat nss-0:3.19.1-1.el5_11 *
Red Hat Enterprise Linux 6 RedHat nss-softokn-0:3.14.3-23.el6_7 *
Red Hat Enterprise Linux 7 RedHat nss-softokn-0:3.16.2.3-13.el7_1 *
Firefox Ubuntu devel *
Firefox Ubuntu precise *
Firefox Ubuntu trusty *
Firefox Ubuntu upstream *
Firefox Ubuntu utopic *
Firefox Ubuntu vivid *
Nss Ubuntu devel *
Nss Ubuntu precise *
Nss Ubuntu trusty *
Nss Ubuntu trusty/esm *
Nss Ubuntu upstream *
Nss Ubuntu utopic *
Nss Ubuntu vivid *
Nss Ubuntu vivid/stable-phone-overlay *
Thunderbird Ubuntu devel *
Thunderbird Ubuntu precise *
Thunderbird Ubuntu trusty *
Thunderbird Ubuntu upstream *
Thunderbird Ubuntu utopic *
Thunderbird Ubuntu vivid *

References