CVE-2013-5606: Medium severity mozilla nss esr vulnerability
The CERTVerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5606?
CVE-2013-5606 has been classified as a moderate severity vulnerability.
How do I fix CVE-2013-5606?
To fix CVE-2013-5606, update to Mozilla Network Security Services version 3.15.3 or later.
What versions of NSS are affected by CVE-2013-5606?
CVE-2013-5606 affects Mozilla Network Security Services versions 3.15, 3.15.1, and 3.15.2.
What does CVE-2013-5606 exploit?
CVE-2013-5606 exploits an unexpected return value for incompatible key-usage certificates.
Who can be impacted by CVE-2013-5606?
Remote attackers may exploit CVE-2013-5606 to bypass intended access restrictions.