USN-4203-2: NSS vulnerability
USN-4203-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.28.4-0ubuntu0.14.04.5+esm2 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.28.4-0ubuntu0.12.04.5 - Upgrade
Upgrade
NSSto a version that resolves this vulnerability.Patch USN-4203-1 - Upgrade
Upgrade
NSSto a version that resolves this vulnerability.Patch USN-4203-2
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is USN-4203-2.
What software is affected by this vulnerability?
The software affected by this vulnerability is libnss3 on Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
What is the severity of the vulnerability?
The severity of the vulnerability is not mentioned in the provided information.
How can I fix this vulnerability?
To fix this vulnerability, update libnss3 to version 2:3.28.4-0ubuntu0.14.04.5+esm2 for Ubuntu 14.04 ESM, and update libnss3 to version 2:3.28.4-0ubuntu0.12.04.5 for Ubuntu 12.04 ESM.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Ubuntu security website: [link].