Search for vulnerabilities
Vulnerability details: VCID-u6nu-186u-auh1
Vulnerability ID VCID-u6nu-186u-auh1
Aliases CVE-2014-1568
Summary Antoine Delignat-Lavaud, security researcher at Inria Paris in team Prosecco, reported an issue in Network Security Services (NSS) libraries affecting all versions. He discovered that NSS is vulnerable to a variant of a signature forgery attack previously published by Daniel Bleichenbacher. This is due to lenient parsing of ASN.1 values involved in a signature and could lead to the forging of RSA certificates.The Advanced Threat Research team at Intel Security also independently discovered and reported this issue.These have been addressed in the NSS releases shipping on affected Mozilla products:
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-347 Improper Verification of Cryptographic Signature
System Score Found at
epss 0.41418 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.41418 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.41418 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.41418 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.41418 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.41418 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.41418 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.41418 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.42007 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.42007 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.42007 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.42007 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
epss 0.42007 https://api.first.org/data/v1/epss?cve=CVE-2014-1568
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2014-73
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1568.json
https://api.first.org/data/v1/epss?cve=CVE-2014-1568
1145429 https://bugzilla.redhat.com/show_bug.cgi?id=1145429
CVE-2014-1568 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1568
mfsa2014-73 https://www.mozilla.org/en-US/security/advisories/mfsa2014-73
RHSA-2014:1307 https://access.redhat.com/errata/RHSA-2014:1307
RHSA-2014:1354 https://access.redhat.com/errata/RHSA-2014:1354
RHSA-2014:1371 https://access.redhat.com/errata/RHSA-2014:1371
USN-2360-1 https://usn.ubuntu.com/2360-1/
USN-2360-2 https://usn.ubuntu.com/2360-2/
USN-2361-1 https://usn.ubuntu.com/2361-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.97285
EPSS Score 0.41418
Published At Aug. 10, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:44.041536+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2014/mfsa2014-73.md 37.0.0