CVE-2021-43527

CVE-2021-43527: falha em Mozilla NSS

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar NSS+ Monitorar nss

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 18%
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
Produtos afetados
Mozilla · NSS
CVEs relacionadas — Mozilla NSS

No mesmo produto, das mais perigosas para as menos.

CVE-2019-17006—CVE-2019-17006EPSS 3.6%CVE-2018-18508—CVE-2018-18508EPSS 2.0%CVE-2019-17007—CVE-2019-17007EPSS 1.4%CVE-2023-4421—CVE-2023-4421EPSS 0.8%