NVD

Id
30119  
Name
CVE-2014-1490  
Description
Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-02-06  
Modified Date
2016-12-30  
Seq
2014-1490  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158650 30119 CVE-2014-1490 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761  View
158651 30119 CVE-2014-1490 FEDORA-2014-2041  View
158652 30119 CVE-2014-1490 FEDORA-2014-2083  View
158653 30119 CVE-2014-1490 openSUSE-SU-2014:0212  View
158654 30119 CVE-2014-1490 openSUSE-SU-2014:0213  View
158655 30119 CVE-2014-1490 SUSE-SU-2014:0248  View
158656 30119 CVE-2014-1490 openSUSE-SU-2014:0419  View
158657 30119 CVE-2014-1490 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
158658 30119 CVE-2014-1490 DSA-2858  View
158659 30119 CVE-2014-1490 http://www.mozilla.org/security/announce/2014/mfsa2014-12.html  View
158660 30119 CVE-2014-1490 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
158661 30119 CVE-2014-1490 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
158662 30119 CVE-2014-1490 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
158663 30119 CVE-2014-1490 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
158664 30119 CVE-2014-1490 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
158665 30119 CVE-2014-1490 65335  View
158666 30119 CVE-2014-1490 USN-2102-1  View
158667 30119 CVE-2014-1490 USN-2102-2  View
158668 30119 CVE-2014-1490 USN-2119-1  View
158669 30119 CVE-2014-1490 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
158670 30119 CVE-2014-1490 https://8pecxstudios.com/?page_id=44080  View
158671 30119 CVE-2014-1490 https://bugzilla.mozilla.org/show_bug.cgi?id=930857  View
158672 30119 CVE-2014-1490 https://bugzilla.mozilla.org/show_bug.cgi?id=930874  View
158673 30119 CVE-2014-1490 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12456 JVNDB-2014-001331 Mozilla 製品などで使用される Mozilla Network Security Services の libssl におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox、Thunderbird、SeaMonkey およびその他の製品で使用される Mozilla Network Security Services (NSS) の libssl には、競合状態により、サービス運用妨害 (解放済みメモリの使用：use-after-free) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-1490 68777 CVE-2014-1490 30119 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001331.html 2014-02-04 2016-01-29 View