Ubuntu 14.04 LTS: USN-2791-1 Moderate: NSS Denial of Service

ubuntu

November 4, 2015

NSS could be made to crash or run programs if it received specially crafted input.

Summary

NSS could be made to crash or run programs if it received specially

crafted input.

Software Description:

- nss: Network Security Service library

Details:

Tyson Smith and David Keeler discovered that NSS incorrectly handled

decoding certain ASN.1 data. An remote attacker could use this issue to

cause NSS to crash, resulting in a denial of service, or possibly execute

arbitrary code.

Topics Covered

security advisory denial of service software update Ubuntu service crash NSS security notice

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  libnss3                         2:3.19.2.1-0ubuntu0.15.10.1

Ubuntu 15.04:
  libnss3                         2:3.19.2.1-0ubuntu0.15.04.1

Ubuntu 14.04 LTS:
  libnss3                         2:3.19.2.1-0ubuntu0.14.04.1

Ubuntu 12.04 LTS:
  libnss3                         3.19.2.1-0ubuntu0.12.04.1

After a standard system update you need to restart any applications that
use NSS, such as Evolution and Chromium, to make all the necessary changes.