Ubuntu 11.10 USN-1540-1 Moderate: NSS Denial Of Service

ubuntu

August 16, 2012

NSS could be made to crash if it opened a specially crafted certificate.

Summary

NSS could be made to crash if it opened a specially crafted certificate.

Software Description:

- nss: Network Security Service library

Details:

Kaspar Brand discovered a vulnerability in how the Network Security

Services (NSS) ASN.1 decoder handles zero length items. If the user were

tricked into opening a specially crafted certificate, an attacker could

possibly exploit this to cause a denial of service via application crash.

Topics Covered

security advisory moderate denial of service ubuntu nss

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  libnss3-1d                      3.12.9+ckbi-1.82-0ubuntu6.1

Ubuntu 11.04:
  libnss3-1d                      3.12.9+ckbi-1.82-0ubuntu2.2

Ubuntu 10.04 LTS:
  libnss3-1d                      3.12.9+ckbi-1.82-0ubuntu0.10.04.4

After a standard system update you need to restart any applications that
use NSS, such as Evolution, to make all the necessary changes.