CVE-2015-3277: Infoleak
It was reported that modnss is vulnerable to the issue similar to CVE-2015-3276, where incorrect parsing of multi-keyword cipherstring can lead to an unexpected ciphers list advertising.
Acknowledgements:
Red Hat would like to thank Martin Poole of Software Maintenance Engineering group for reporting this issue.
Other sources
The modnss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of multi-keyword cipherstring.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3277?
CVE-2015-3277 is classified as a moderate severity vulnerability.
How do I fix CVE-2015-3277?
To remediate CVE-2015-3277, update mod_nss to version 1.0.11 or later.
What types of systems are affected by CVE-2015-3277?
CVE-2015-3277 affects systems running mod_nss versions up to 1.0.10.
What is the nature of the vulnerability in CVE-2015-3277?
CVE-2015-3277 involves incorrect parsing of a multi-keyword cipher string that may expose an unexpected ciphers list.
Is CVE-2015-3277 similar to any other vulnerabilities?
Yes, CVE-2015-3277 is reported to be similar to CVE-2015-3276.