CVE-2013-5605

EPSS 4.4%
Veröffentlicht 18.11.2013 05:23:57
Zuletzt bearbeitet 29.04.2026 01:13:23
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 31

NVD 8 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Network Security Services Version3.14

Mozilla ≫ Network Security Services Version3.14.1

Mozilla ≫ Network Security Services Version3.14.2

Mozilla ≫ Network Security Services Version3.14.3

Mozilla ≫ Network Security Services Version3.14.4

Mozilla ≫ Network Security Services Version3.15

Mozilla ≫ Network Security Services Version3.15.1

Mozilla ≫ Network Security Services Version3.15.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.4%	0.901

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

http://seclists.org/fulldisclosure/2014/Dec/23

http://security.gentoo.org/glsa/glsa-201406-19.xml

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

http://www.securityfocus.com/archive/1/534161/100/0/threaded

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

http://www.mozilla.org/security/announce/2013/mfsa2013-103.html

http://www.ubuntu.com/usn/USN-2031-1

http://www.ubuntu.com/usn/USN-2032-1

https://security.gentoo.org/glsa/201504-01

http://rhn.redhat.com/errata/RHSA-2013-1791.html

http://rhn.redhat.com/errata/RHSA-2013-1829.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://www.ubuntu.com/usn/USN-2030-1

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html

http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html

https://developer.mozilla.org/docs/NSS/NSS_3.15.3_release_notes

Patch

http://lists.opensuse.org/opensuse-updates/2013-11/msg00078.html

http://rhn.redhat.com/errata/RHSA-2013-1840.html

http://rhn.redhat.com/errata/RHSA-2013-1841.html

http://rhn.redhat.com/errata/RHSA-2014-0041.html

http://www.debian.org/security/2013/dsa-2800

http://www.securityfocus.com/bid/63738

https://bugzilla.mozilla.org/show_bug.cgi?id=934016

https://developer.mozilla.org/docs/NSS/NSS_3.14.5_release_notes

Patch

https://nvd.nist.gov/vuln/detail/CVE-2013-5605

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5605

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5605

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-5605