CVE-2017-5462

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.6%

probabilidade de exploração

2.6%top 15% das CVEs

exploração observada

nãonenhuma fonte reporta

A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

Produtos afetados

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1345089 https://security.gentoo.org/glsa/201705-04 https://www.debian.org/security/2017/dsa-3831 https://www.debian.org/security/2017/dsa-3872 https://www.mozilla.org/security/advisories/mfsa2017-10/https://www.mozilla.org/security/advisories/mfsa2017-11/https://www.mozilla.org/security/advisories/mfsa2017-12/https://www.mozilla.org/security/advisories/mfsa2017-13/http://www.securityfocus.com/bid/97940 http://www.securitytracker.com/id/1038320