suse · CVE-2016-9574

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-9574 severity important: SUSE including 84 source package names (MozillaFirefox-45.9.0esr-105.1, MozillaFirefox-45.9.0esr-71.2, …), 464 product×package rows across 51 product lines (Image SLES12-SP5-Azure-BYOS, Image SLES12-SP5-Azure-Basic-On-Demand, … (51 product lines)): Fixed 464.

Description:

nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.