CVE

Id
84458  
CVE No.
CVE-2015-7181  
Status
Candidate  
Description
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.  
Phase
Assigned (20150916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
748023 84458 CVE-2015-7181 MISC:http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html  View
748024 84458 CVE-2015-7181 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-133.html  View
748025 84458 CVE-2015-7181 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1192028  View
748026 84458 CVE-2015-7181 CONFIRM:https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes  View
748027 84458 CVE-2015-7181 CONFIRM:https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes  View
748028 84458 CVE-2015-7181 CONFIRM:https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes  View
748029 84458 CVE-2015-7181 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
748030 84458 CVE-2015-7181 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
748031 84458 CVE-2015-7181 CONFIRM:http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
748032 84458 CVE-2015-7181 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
748033 84458 CVE-2015-7181 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
748034 84458 CVE-2015-7181 CONFIRM:https://bto.bluecoat.com/security-advisory/sa119  View
748035 84458 CVE-2015-7181 DEBIAN:DSA-3410  View
748036 84458 CVE-2015-7181 URL:http://www.debian.org/security/2015/dsa-3410  View
748037 84458 CVE-2015-7181 DEBIAN:DSA-3393  View
748038 84458 CVE-2015-7181 URL:http://www.debian.org/security/2015/dsa-3393  View
748039 84458 CVE-2015-7181 GENTOO:GLSA-201605-06  View
748040 84458 CVE-2015-7181 URL:https://security.gentoo.org/glsa/201605-06  View
748041 84458 CVE-2015-7181 GENTOO:GLSA-201512-10  View
748042 84458 CVE-2015-7181 URL:https://security.gentoo.org/glsa/201512-10  View
748043 84458 CVE-2015-7181 REDHAT:RHSA-2015:1980  View
748044 84458 CVE-2015-7181 URL:http://rhn.redhat.com/errata/RHSA-2015-1980.html  View
748045 84458 CVE-2015-7181 REDHAT:RHSA-2015:1981  View
748046 84458 CVE-2015-7181 URL:http://rhn.redhat.com/errata/RHSA-2015-1981.html  View
748047 84458 CVE-2015-7181 SLACKWARE:SSA:2015-310-02  View
748048 84458 CVE-2015-7181 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753  View
748049 84458 CVE-2015-7181 SUSE:openSUSE-SU-2015:2229  View
748050 84458 CVE-2015-7181 URL:http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html  View
748051 84458 CVE-2015-7181 SUSE:openSUSE-SU-2015:2245  View
748052 84458 CVE-2015-7181 URL:http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html  View
748053 84458 CVE-2015-7181 SUSE:SUSE-SU-2015:1926  View
748054 84458 CVE-2015-7181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html  View
748055 84458 CVE-2015-7181 SUSE:openSUSE-SU-2015:1942  View
748056 84458 CVE-2015-7181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html  View
748057 84458 CVE-2015-7181 SUSE:SUSE-SU-2015:1978  View
748058 84458 CVE-2015-7181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html  View
748059 84458 CVE-2015-7181 SUSE:SUSE-SU-2015:1981  View
748060 84458 CVE-2015-7181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html  View
748061 84458 CVE-2015-7181 SUSE:SUSE-SU-2015:2081  View
748062 84458 CVE-2015-7181 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html  View
748063 84458 CVE-2015-7181 UBUNTU:USN-2819-1  View
748064 84458 CVE-2015-7181 URL:http://www.ubuntu.com/usn/USN-2819-1  View
748065 84458 CVE-2015-7181 UBUNTU:USN-2785-1  View
748066 84458 CVE-2015-7181 URL:http://www.ubuntu.com/usn/USN-2785-1  View
748067 84458 CVE-2015-7181 UBUNTU:USN-2791-1  View
748068 84458 CVE-2015-7181 URL:http://www.ubuntu.com/usn/USN-2791-1  View
748069 84458 CVE-2015-7181 BID:91787  View
748070 84458 CVE-2015-7181 URL:http://www.securityfocus.com/bid/91787  View
748071 84458 CVE-2015-7181 BID:77416  View
748072 84458 CVE-2015-7181 URL:http://www.securityfocus.com/bid/77416  View
748073 84458 CVE-2015-7181 SECTRACK:1034069  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9592 JVNDB-2015-004912 Drupal 用 OSF モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 OSF モジュールには、OSF Import モジュールが有効になっている場合、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2015-7233 84458 5.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004912.html  View