CVE-2015-2730

EPSS 0.34%
Published 06.07.2015 02:01:01
Last modified 12.04.2025 10:46:40
Source security@mozilla.org
Teams watchlist Login
Open Login

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 24

Data is provided by the National Vulnerability Database (NVD)

Novell ≫ Suse Linux Enterprise Software Development Kit Version12.0

Debian ≫ Debian Linux Version7.0

Debian ≫ Debian Linux Version8.0

Novell ≫ Suse Linux Enterprise Desktop Version12.0

Novell ≫ Suse Linux Enterprise Server Version11 Updatesp4

Novell ≫ Suse Linux Enterprise Server Version12.0

Mozilla ≫ Network Security Services Version <= 3.19

   Mozilla ≫ Firefox Version <= 38.1.0
   Mozilla ≫ Firefox Version31.0
   Mozilla ≫ Firefox Version31.1.0
   Mozilla ≫ Firefox Version31.1.1
   Mozilla ≫ Firefox Version31.3.0
   Mozilla ≫ Firefox Version31.5.1
   Mozilla ≫ Firefox Version31.5.2
   Mozilla ≫ Firefox Version31.5.3
   Mozilla ≫ Firefox Version38.0
   Mozilla ≫ Firefox ESR Version31.1
   Mozilla ≫ Firefox ESR Version31.2
   Mozilla ≫ Firefox ESR Version31.3
   Mozilla ≫ Firefox ESR Version31.4
   Mozilla ≫ Firefox ESR Version31.5
   Mozilla ≫ Firefox ESR Version31.6.0
   Mozilla ≫ Firefox ESR Version31.7.0

Oracle ≫ Solaris Version11.3

Oracle ≫ Vm Server Version3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.