Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/nss@3.13.4-1?distro=trixie |
| Type | deb |
| Namespace | debian |
| Name | nss |
| Version | 3.13.4-1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 2:3.14.3-1 |
| Latest_non_vulnerable_version | 2:3.124-1 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-2b7j-hzma-nbfb |
| vulnerability_id |
VCID-2b7j-hzma-nbfb |
| summary |
Security researcher Kaspar Brand found a flaw in how the
Network Security Services (NSS) ASN.1 decoder handles zero length items. Effects
of this issue depend on the field. One known symptom is an unexploitable crash
in handling OCSP responses. NSS also mishandles zero-length basic constraints,
assuming default values for some types that should be rejected as malformed.
These issues have been addressed in NSS 3.13.4, which is now being used by
Mozilla. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-0441
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2b7j-hzma-nbfb |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/nss@3.13.4-1%3Fdistro=trixie |