USN-4203-1: NSS vulnerability
It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.45-1ubuntu2.1 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.42-1ubuntu2.3 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.35-2ubuntu2.5 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.28.4-0ubuntu0.16.04.8
Event History
Frequently Asked Questions
What is the vulnerability ID for this security notice?
The vulnerability ID for this security notice is USN-4203-1.
What is the title of this security notice?
The title of this security notice is 'USN-4203-1: NSS vulnerability'.
What is the description of the vulnerability?
The vulnerability in NSS allows a remote attacker to crash NSS or possibly execute arbitrary code.
Which software is affected by this vulnerability?
The libnss3 package in Ubuntu versions 19.10, 19.04, 18.04, and 16.04 is affected by this vulnerability.
How can I fix this vulnerability?
To fix this vulnerability, update the libnss3 package to the specified remedial version for your Ubuntu version.