CVE-2016-9574: Medium severity mozilla nss esr vulnerability
Published Jul 19, 2018
·Updated
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
Affected Software
1 affected component
Mozilla Network Security Services<3.30
Remediation
Patch Available
Event History
Jul 19, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-9574?
CVE-2016-9574 has a severity rating of medium as it can lead to a remote denial of service.
2
How do I fix CVE-2016-9574?
To fix CVE-2016-9574, update to NSS version 3.30 or later.
3
What software is affected by CVE-2016-9574?
CVE-2016-9574 affects the Mozilla Network Security Services before version 3.30.
4
What type of vulnerability is CVE-2016-9574?
CVE-2016-9574 is a remote denial of service vulnerability that occurs during the session handshake.
5
What is the cause of CVE-2016-9574?
CVE-2016-9574 is caused by a flaw in the handling of the SessionTicket extension and ECDHE-ECDSA.