Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 15.10: 2924-1 Critical: NSS Crash And Code Execution Risk

ubuntu
Calendar Grey March 9, 2016
Scroller Ubuntu
The NSS may fail or run malicious code when provided with specially designed inputs. To protect yourself from this vulnerability, ensure your Ubuntu installation is fully updated.
NSS could be made to crash or run programs if it received specially crafted input.

Summary

NSS could be made to crash or run programs if it received specially crafted

input.

Software Description:

- nss: Network Security Service library

Details:

Francis Gabriel discovered that NSS incorrectly handled decoding certain

ASN.1 data. An remote attacker could use this issue to cause NSS to crash,

resulting in a denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service security issue code execution ubuntu update instruction nss

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  libnss3                         2:3.21-0ubuntu0.15.10.2

Ubuntu 14.04 LTS:
  libnss3                         2:3.21-0ubuntu0.14.04.2

Ubuntu 12.04 LTS:
  libnss3                         2:3.21-0ubuntu0.12.04.3

After a standard system update you need to restart any applications that
use NSS, such as Evolution and Chromium, to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2924-1

CVE-2016-1950

Severity
critical
Lowest
Low
Medium
High
Critical

March 09, 2016

Topics%20covered

Topics Covered

security advisory denial of service security issue code execution ubuntu update instruction nss

Package Information

https://launchpad.net/ubuntu/+source/nss/2:3.21-0ubuntu0.15.10.2
https://launchpad.net/ubuntu/+source/nss/2:3.21-0ubuntu0.14.04.2
https://launchpad.net/ubuntu/+source/nss/2:3.21-0ubuntu0.12.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.