CVE-2019-17007: Null Pointer Dereference

Reference Links

• https://bugs.chromium.org/p/project-zero/issues/detail?id=1798
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1703987
• https://hg.mozilla.org/projects/nss/rev/1473dd7efe2ce4f8722a33ebb03a3425e09887de
• https://access.redhat.com/support/policy/updates/jboss_notes
• https://bugzilla.mozilla.org/show_bug.cgi?id=1533216
• https://access.redhat.com/errata/RHSA-2021:0876
• https://bugzilla.redhat.com/show_bug.cgi?id=1703979
• https://www.cisa.gov/news-events/ics-advisories/icsa-21-040-04 (Advisory)
• https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes
• https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04
• https://www.ibm.com/support/pages/node/7177223 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-21-040-04
• IBM-7177223

Frequently Asked Questions

• What is CVE-2019-17007?

  CVE-2019-17007 is a vulnerability in Network Security Services (NSS) before version 3.44.

• How does CVE-2019-17007 affect systems?

  CVE-2019-17007 can cause NSS to crash, resulting in a denial of service.

• What is the severity of CVE-2019-17007?

  The severity of CVE-2019-17007 is high, with a CVSS score of 7.5.

• How do I fix CVE-2019-17007?

  To fix CVE-2019-17007, update Network Security Services (NSS) to version 3.44 or later.

• Where can I find more information about CVE-2019-17007?

  You can find more information about CVE-2019-17007 on the following references: 1. [Chromium Project Zero](https://bugs.chromium.org/p/project-zero/issues/detail?id=1798) 2. [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1703987) 3. [Mozilla NSS Repository](https://hg.mozilla.org/projects/nss/rev/1473dd7efe2ce4f8722a33ebb03a3425e09887de)