CVE-2015-2730: Medium severity Novell Suse Linux Enterprise Software Development Kit vulnerability
Last updated 24 July 2024
Other sources
Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozi ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nssto a version that resolves this vulnerability.Fixed in 2:3.61-1+deb11u3Fixed in 2:3.61-1+deb11u4Fixed in 2:3.87.1-1+deb12u1Fixed in 2:3.110-1 - Upgrade
Upgrade
Mozilla NSSto a version that resolves this vulnerability.Fixed in 3.19.1 - Upgrade
Upgrade
Mozilla Firefoxto a version that resolves this vulnerability.Fixed in 39.0 - Upgrade
Upgrade
Mozilla Firefox ESRto a version that resolves this vulnerability.Fixed in 31.8 - Upgrade
Upgrade
Mozilla Firefox ESRto a version that resolves this vulnerability.Fixed in 38.1
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2015-2730.
What is the severity level of CVE-2015-2730?
The severity level of CVE-2015-2730 is medium (4.3).
What software is affected by CVE-2015-2730?
The software affected by CVE-2015-2730 includes Mozilla Firefox, Mozilla Firefox ESR, Novell Suse Linux Enterprise Server, Novell Suse Linux Enterprise Desktop, Debian Linux, Oracle Solaris, and Oracle VM Server.
How can remote attackers exploit CVE-2015-2730?
Remote attackers can exploit CVE-2015-2730 by spoofing ECD signatures and performing ECC multiplications.
What is the recommended remedy for CVE-2015-2730?
The recommended remedy for CVE-2015-2730 is to update to Mozilla Network Security Services (NSS) version 3.19.1 or later.