CVE-2016-1938: Medium severity ibm cognos analytics vulnerability
Mozilla Firefox could provide weaker than expected security, caused by the creation of incorrect calculations in certain cases by the Network Security Services (NSS) mpdiv() and mpexptmod() functions. An attacker could exploit this vulnerability to create cryptographic weaknesses.
Other sources
The smpdiv function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mpdiv or (2) mpexptmod function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1938?
CVE-2016-1938 has been classified with a moderate severity level due to the potential for creating cryptographic weaknesses.
How do I fix CVE-2016-1938?
To fix CVE-2016-1938, ensure that you apply the latest patches provided by your affected software vendor.
Which software applications are affected by CVE-2016-1938?
CVE-2016-1938 affects various versions of Mozilla Firefox and Network Security Services (NSS), along with IBM Cognos Analytics.
What kind of attacks can exploit CVE-2016-1938?
An attacker can exploit CVE-2016-1938 to create weak cryptographic operations, potentially compromising secure communications.
What versions of Mozilla Firefox are impacted by CVE-2016-1938?
CVE-2016-1938 affects Mozilla Firefox up to version 43.0.4.