CVE-2013-1740: Medium severity mozilla nss esr vulnerability
A security issue has been reported in NSS, which can be exploited by a malicious user to disclose certain information.
The issue arises due to an error within the "sslDo1stHandshake()" function in lib/ssl/sslsecur.c, which can be exploited to potentially return unencrypted and unauthenticated data from PRRecv. Successful exploitation requires false start to be enabled.
The issue is said to be fixed in NSS 3.15.4.
References: https://bugs.gentoo.org/showbug.cgi?id=498172 https://developer.mozilla.org/en-US/docs/NSS/NSS3.15.4releasenotes
Upstream bug: https://bugzilla.mozilla.org/showbug.cgi?id=919877
Patch: https://bugzilla.mozilla.org/attachment.cgi?id=825813
Other sources
The sslDo1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1740?
CVE-2013-1740 has been classified as a medium severity vulnerability as it can lead to the disclosure of sensitive information.
How do I fix CVE-2013-1740?
To fix CVE-2013-1740, update the NSS package to version 3.15.4 or higher.
What versions of NSS are affected by CVE-2013-1740?
CVE-2013-1740 affects NSS versions up to 3.15.3 and several exact versions below 3.15.4.
What type of vulnerability is CVE-2013-1740?
CVE-2013-1740 is an information disclosure vulnerability that can be exploited by a malicious user.
Can CVE-2013-1740 impact browser applications?
Yes, applications that utilize the affected versions of NSS for handling SSL can be impacted by CVE-2013-1740.