First published: Mon Jul 06 2015(Updated: )
Last updated 24 July 2024
Credit: security@mozilla.org security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Novell Suse Linux Enterprise Software Development Kit | =12.0 | |
Debian Debian Linux | =7.0 | |
Debian Debian Linux | =8.0 | |
Novell Suse Linux Enterprise Desktop | =12.0 | |
Novell Suse Linux Enterprise Server | =11-sp4 | |
Novell Suse Linux Enterprise Server | =12.0 | |
Mozilla Network Security Services | <=3.19 | |
Mozilla Firefox | <=38.1.0 | |
Mozilla Firefox ESR | =31.0 | |
Mozilla Firefox ESR | =31.1 | |
Mozilla Firefox ESR | =31.1.0 | |
Mozilla Firefox ESR | =31.1.1 | |
Mozilla Firefox ESR | =31.2 | |
Mozilla Firefox ESR | =31.3 | |
Mozilla Firefox ESR | =31.3.0 | |
Mozilla Firefox ESR | =31.4 | |
Mozilla Firefox ESR | =31.5 | |
Mozilla Firefox ESR | =31.5.1 | |
Mozilla Firefox ESR | =31.5.2 | |
Mozilla Firefox ESR | =31.5.3 | |
Mozilla Firefox ESR | =31.6.0 | |
Mozilla Firefox ESR | =31.7.0 | |
Mozilla Firefox ESR | =38.0 | |
Oracle Solaris | =11.3 | |
Oracle VM Server | =3.2 | |
All of | ||
Mozilla Network Security Services | <=3.19 | |
Any of | ||
Mozilla Firefox | <=38.1.0 | |
Mozilla Firefox | =31.0 | |
Mozilla Firefox | =31.1.0 | |
Mozilla Firefox | =31.1.1 | |
Mozilla Firefox | =31.3.0 | |
Mozilla Firefox | =31.5.1 | |
Mozilla Firefox | =31.5.2 | |
Mozilla Firefox | =31.5.3 | |
Mozilla Firefox | =38.0 | |
Mozilla Firefox ESR | =31.1 | |
Mozilla Firefox ESR | =31.2 | |
Mozilla Firefox ESR | =31.3 | |
Mozilla Firefox ESR | =31.4 | |
Mozilla Firefox ESR | =31.5 | |
Mozilla Firefox ESR | =31.6.0 | |
Mozilla Firefox ESR | =31.7.0 | |
debian/nss | 2:3.61-1+deb11u3 2:3.61-1+deb11u4 2:3.87.1-1+deb12u1 2:3.107-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this vulnerability is CVE-2015-2730.
The severity level of CVE-2015-2730 is medium (4.3).
The software affected by CVE-2015-2730 includes Mozilla Firefox, Mozilla Firefox ESR, Novell Suse Linux Enterprise Server, Novell Suse Linux Enterprise Desktop, Debian Linux, Oracle Solaris, and Oracle VM Server.
Remote attackers can exploit CVE-2015-2730 by spoofing ECD signatures and performing ECC multiplications.
The recommended remedy for CVE-2015-2730 is to update to Mozilla Network Security Services (NSS) version 3.19.1 or later.