Ubuntu 17.04: USN-3336-1 moderate: NSS Denial Of Service

ubuntu

June 21, 2017

NSS could be made to crash if it received specially crafted network traffic.

Summary

NSS could be made to crash if it received specially crafted network

traffic.

Software Description:

- nss: Network Security Service library

Details:

It was discovered that NSS incorrectly handled certain empty SSLv2

messages. A remote attacker could possibly use this issue to cause NSS to

crash, resulting in a denial of service.

Topics Covered

security advisory denial of service network security update ubuntu nss

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  libnss3                         2:3.28.4-0ubuntu0.17.04.2

Ubuntu 16.10:
  libnss3                         2:3.28.4-0ubuntu0.16.10.2

Ubuntu 16.04 LTS:
  libnss3                         2:3.28.4-0ubuntu0.16.04.2

Ubuntu 14.04 LTS:
  libnss3                         2:3.28.4-0ubuntu0.14.04.2

After a standard system update you need to restart any applications
that use NSS, such as Evolution and Chromium, to make all the necessary
changes.