CVE-2022-3479

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1774654
• https://bugzilla.redhat.com/show_bug.cgi?id=2134331
• https://security.gentoo.org/glsa/202212-05
• https://launchpad.net/bugs/cve/CVE-2022-3479
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2129433
• https://access.redhat.com/security/cve/cve-2022-3479
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3479
• https://nvd.nist.gov/vuln/detail/CVE-2022-3479
• https://security-tracker.debian.org/tracker/CVE-2022-3479
• https://ubuntu.com/security/CVE-2022-3479
• https://hg.mozilla.org/projects/nss/rev/a7f363511333b8062945557607691002fd6e40b9
• https://www.ibm.com/support/pages/node/7177223 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-7177223

Frequently Asked Questions

• What is CVE-2022-3479?

  CVE-2022-3479 is a vulnerability found in nss where the client auth can crash without a user certificate, leading to a segmentation fault or crash.

• What is the severity of CVE-2022-3479?

  CVE-2022-3479 has a severity level of medium.

• Which software is affected by CVE-2022-3479?

  The software affected by CVE-2022-3479 includes nss versions 2:3.82-1ubuntu0.1, 3.81 (Red Hat), and various versions (2:3.42.1-1+deb10u5, 2:3.42.1-1+deb10u6, 2:3.61-1+deb11u3, 2:3.87.1-1, 2:3.92-1) on Debian.

• How can I fix CVE-2022-3479 on Ubuntu?

  To fix CVE-2022-3479 on Ubuntu, update the nss package to version 2:3.82-1ubuntu0.1 or later.

• Where can I find more information about CVE-2022-3479?

  You can find more information about CVE-2022-3479 at the following references: [1](https://bugzilla.mozilla.org/show_bug.cgi?id=1774654), [2](https://bugzilla.redhat.com/show_bug.cgi?id=2134331), [3](https://security.gentoo.org/glsa/202212-05).