Advisories » MGASA-2017-0160

Updated nss packages fix security vulnerability

Publication date: 08 Jun 2017
Modification date: 08 Jun 2017
Type: security
Affected Mageia releases : 5
CVE: CVE-2017-7502

Description

A null pointer dereference flaw was found in the way NSS handled empty
SSLv2 messages. An attacker could use this flaw to crash a server
application compiled against the NSS library (CVE-2017-7502).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=20989
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28.5_release_notes
• https://rhn.redhat.com/errata/RHSA-2017-1365.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7502

SRPMS

5/core

• nss-3.28.5-1.mga5