Out-of-bounds read In nspr
Description
Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 2:4.10.10-1 | ||
debian 13 | 2:4.10.10-1 | ||
 rpm rhel6.6 | 0:3.19.1-2.el6_6 | ||
rpm rhel6 | 0:3.19.1-5.el6_7 | ||
debian 12 | 2:4.10.10-1 | ||
rpm rhel6 | 0:4.10.8-2.el6_7 | ||
debian 11 | 2:4.10.10-1 | ||
rpm rhel6 | 0:3.19.1-2.el6_7 | ||
rpm rhel6.5 | 0:4.10.6-2.el6_5 | ||
rpm rhel5 | 0:4.10.8-2.el5_11 |
1-10 of 18
10
Aliases
1. 2. 3. 4. 5.