- Vulnerability/
- USN-4203-1
USN-4203-1: NSS vulnerability
First published: Wed Nov 27 2019(Updated: )
It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libnss3 | <2:3.45-1ubuntu2.1 | 2:3.45-1ubuntu2.1 |
| Ubuntu Ubuntu | =19.10 | |
| All of | ||
| ubuntu/libnss3 | <2:3.42-1ubuntu2.3 | 2:3.42-1ubuntu2.3 |
| Ubuntu Ubuntu | =19.04 | |
| All of | ||
| ubuntu/libnss3 | <2:3.35-2ubuntu2.5 | 2:3.35-2ubuntu2.5 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/libnss3 | <2:3.28.4-0ubuntu0.16.04.8 | 2:3.28.4-0ubuntu0.16.04.8 |
| Ubuntu Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-11745
- https://ubuntu.com/security/notices/USN-4216-2
- https://ubuntu.com/security/notices/USN-4216-1
- https://ubuntu.com/security/notices/USN-4335-1
- https://ubuntu.com/security/notices/USN-4241-1
- https://ubuntu.com/security/notices/USN-4203-2
- https://launchpad.net/ubuntu/+source/nss/2:3.45-1ubuntu2.1
- https://launchpad.net/ubuntu/+source/nss/2:3.42-1ubuntu2.3
- https://launchpad.net/ubuntu/+source/nss/2:3.35-2ubuntu2.5
- https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.8
- https://ubuntu.com/security/notices/USN-4203-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this security notice?
The vulnerability ID for this security notice is USN-4203-1.
What is the title of this security notice?
The title of this security notice is 'USN-4203-1: NSS vulnerability'.
What is the description of the vulnerability?
The vulnerability in NSS allows a remote attacker to crash NSS or possibly execute arbitrary code.
Which software is affected by this vulnerability?
The libnss3 package in Ubuntu versions 19.10, 19.04, 18.04, and 16.04 is affected by this vulnerability.
How can I fix this vulnerability?
To fix this vulnerability, update the libnss3 package to the specified remedial version for your Ubuntu version.
- agent/severity
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/usn
- source/Ubuntu
- anchor-related/USN-4216-2
- anchor-related/USN-4216-1
- anchor-related/USN-4335-1
- anchor-related/USN-4241-1
- anchor-related/USN-4203-2
- agent/software-canonical-lookup
- agent/event
- agent/title
- agent/tags
- agent/description
- agent/references
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/19.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04