Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 14.04 ESM: USN-4203-2 Moderate: NSS Denial Of Service

ubuntu
Calendar Grey November 27, 2019
Dist Ubuntu Esm H88
NSS might fail or run unintended commands with specially designed input; security patch available for Ubuntu 12.04 and 14.04 ESM.
NSS could be made to crash or run programs if it received specially crafted input.

Summary

NSS could be made to crash or run programs if it received specially crafted

input.

Software Description:

- nss: Network Security Service library

Details:

USN-4203-1 fixed a vulnerability in NSS. This update provides

the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that NSS incorrectly handled certain memory operations. A

remote attacker could use this issue to cause NSS to crash, resulting in a

denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service software update remote code execution Ubuntu vulnerability nss

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  libnss3                         2:3.28.4-0ubuntu0.14.04.5+esm2

Ubuntu 12.04 ESM:
  libnss3                         2:3.28.4-0ubuntu0.12.04.5

After a standard system update you need to restart any applications that
use NSS, such as Evolution, to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4203-2

https://ubuntu.com/security/notices/USN-4203-1

CVE-2019-11745

November 27, 2019

Topics%20covered

Topics Covered

security advisory denial of service software update remote code execution Ubuntu vulnerability nss

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here