Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 12.04 ESM USN-3898-2 Critical: NSS Denial Of Service

ubuntu
Calendar Grey February 27, 2019
Dist Ubuntu Esm H88
=========================================================================Ubuntu Security Notice USN-
NSS could be made to crash if it received specially crafted network traffic.

Summary

NSS could be made to crash if it received specially crafted network

traffic.

Software Description:

- nss: Network Security Service library

Details:

USN-3898-1 fixed a vulnerability in NSS. This update provides

the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 Hanno Böck and Damian Poddebniak discovered that NSS incorrectly

 handled certain CMS functions. A remote attacker could possibly use

 this issue to cause NSS to crash, resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu network traffic NSS

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  libnss3                         2:3.28.4-0ubuntu0.12.04.3

After a standard system update you need to restart any applications
that use NSS, such as Evolution, to make all the necessary changes.

References

 

  https://ubuntu.com/security/notices/USN-3898-1

  CVE-2018-18508

Severity
critical
Lowest
Low
Medium
High
Critical

February 27, 2019

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu network traffic NSS

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here