CVE-2019-17006

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.

Score
CVSS 3.1 9.8 Critical
Status
Modified - security@mozilla.org
Published
2020-10-22
Last modified
2024-08-05
Weaknesses
CWE-119, CWE-20

Affected products

References

 
 
© AVABIS GmbH privacypolicy about