Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Network_security_services | Mozilla | 3.24.0 (including) | 3.24.0 (including) |
| Network_security_services | Mozilla | 3.25.0 (including) | 3.25.0 (including) |
| Network_security_services | Mozilla | 3.25.1 (including) | 3.25.1 (including) |
| Network_security_services | Mozilla | 3.26.0 (including) | 3.26.0 (including) |
| Network_security_services | Mozilla | 3.26.2 (including) | 3.26.2 (including) |
| Network_security_services | Mozilla | 3.27.0 (including) | 3.27.0 (including) |
| Network_security_services | Mozilla | 3.27.1 (including) | 3.27.1 (including) |
| Network_security_services | Mozilla | 3.27.2 (including) | 3.27.2 (including) |
| Network_security_services | Mozilla | 3.28.0 (including) | 3.28.0 (including) |
| Network_security_services | Mozilla | 3.28.1 (including) | 3.28.1 (including) |
| Network_security_services | Mozilla | 3.28.2 (including) | 3.28.2 (including) |
| Network_security_services | Mozilla | 3.28.3 (including) | 3.28.3 (including) |
| Network_security_services | Mozilla | 3.29.0 (including) | 3.29.0 (including) |
| Network_security_services | Mozilla | 3.29.1 (including) | 3.29.1 (including) |
| Network_security_services | Mozilla | 3.29.2 (including) | 3.29.2 (including) |
| Network_security_services | Mozilla | 3.29.3 (including) | 3.29.3 (including) |
| Network_security_services | Mozilla | 3.30.0 (including) | 3.30.0 (including) |
| Network_security_services | Mozilla | 3.30.1 (including) | 3.30.1 (including) |
| Red Hat Container Development Kit 3.0 | RedHat | * | |
| Red Hat Enterprise Linux 6 | RedHat | nss-0:3.28.4-3.el6_9 | * |
| Red Hat Enterprise Linux 7 | RedHat | nss-0:3.28.4-1.2.el7_3 | * |
| Nss | Ubuntu | devel | * |
| Nss | Ubuntu | trusty | * |
| Nss | Ubuntu | vivid/stable-phone-overlay | * |
| Nss | Ubuntu | xenial | * |
| Nss | Ubuntu | yakkety | * |
| Nss | Ubuntu | zesty | * |