Ubuntu: 4203-1 Critical Vulnerability in NSS Memory Management Issue

ubuntu

November 27, 2019

NSS could be made to crash or run programs if it received specially crafted input.

Summary

NSS could be made to crash or run programs if it received specially crafted

input.

Software Description:

- nss: Network Security Service library

Details:

It was discovered that NSS incorrectly handled certain memory operations. A

remote attacker could use this issue to cause NSS to crash, resulting in a

denial of service, or possibly execute arbitrary code.

Topics Covered

security advisory denial of service Ubuntu remote execution NSS memory operations

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  libnss3                         2:3.45-1ubuntu2.1

Ubuntu 19.04:
  libnss3                         2:3.42-1ubuntu2.3

Ubuntu 18.04 LTS:
  libnss3                         2:3.35-2ubuntu2.5

Ubuntu 16.04 LTS:
  libnss3                         2:3.28.4-0ubuntu0.16.04.8

After a standard system update you need to restart any applications that
use NSS, such as Evolution, to make all the necessary changes.