CVE-2014-1568

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mozilla Network Security Services（NSS）是美国Mozilla基金会开发的一个函数库（网络安全服务库），它可跨平台提供SSL、S/MIME和其他Internet安全标准支持。 多款Mozilla产品和基于Windows或OS X平台的Google Chrome和Google Chrome OS上使用的Mozilla NSS中存在安全漏洞，该漏洞源于程序没有正确解析X.509证书中的ASN.1值。远程者可通过特制的证书利用该漏洞伪造RSA签名。以下版本受到影响：Mozill

CVE-2014-1568 affects n/a n/a. High exploitation probability; assess promptly. Mozilla Network Security Services（NSS）是美国Mozilla基金会开发的一个函数库（网络安全服务库），它可跨平台提供SSL、S/MIME和其他Internet安全标准支持。 多款Mozilla产品和基于Windows或OS X平台的Google Chrome和Google Chrome OS上使用的Mozilla NSS中 CVE-2014-1568 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2014-1568

I. Basic Information for CVE-2014-1568

Affected Products

II. Public POCs for CVE-2014-1568

III. Intelligence Information for CVE-2014-1568

Vendor Advisories for CVE-2014-1568 (27)

• http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html x_refsource_CONFIRM
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 x_refsource_CONFIRM
• http://www.mozilla.org/security/announce/2014/mfsa2014-73.html x_refsource_CONFIRM
• https://bugzilla.mozilla.org/show_bug.cgi?id=1069405 x_refsource_CONFIRM
• http://googlechromereleases.blogspot.com/2014/09/stable-channel-update_24.html x_refsource_CONFIRM
• http://googlechromereleases.blogspot.com/2014/09/stable-channel-update-for-chrome-os_24.html x_refsource_CONFIRM
• https://bugzilla.mozilla.org/show_bug.cgi?id=1064636 x_refsource_CONFIRM
• http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html x_refsource_CONFIRM
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 x_refsource_CONFIRM
• http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html x_refsource_CONFIRM
• http://secunia.com/advisories/61574 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/61540 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/70116 vdb-entry x_refsource_BID
• http://secunia.com/advisories/61575 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/61583 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/61576 third-party-advisory x_refsource_SECUNIA
• [SECURITY] [DSA 3033-1] nss security update vendor-advisory x_refsource_DEBIAN
• http://www.debian.org/security/2014/dsa-3037 vendor-advisory x_refsource_DEBIAN
• http://www.debian.org/security/2014/dsa-3034 vendor-advisory x_refsource_DEBIAN
• http://www.kb.cert.org/vuls/id/772676 third-party-advisory x_refsource_CERT-VN
• http://www.ubuntu.com/usn/USN-2361-1 vendor-advisory x_refsource_UBUNTU
• http://www.ubuntu.com/usn/USN-2360-1 vendor-advisory x_refsource_UBUNTU
• https://security.gentoo.org/glsa/201504-01 vendor-advisory x_refsource_GENTOO
• http://rhn.redhat.com/errata/RHSA-2014-1354.html vendor-advisory x_refsource_REDHAT
• RHSA-2014:1371 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• http://rhn.redhat.com/errata/RHSA-2014-1307.html vendor-advisory x_refsource_REDHAT
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96194 vdb-entry x_refsource_XF

Mailing List Discussions for CVE-2014-1568 (3)

• http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00032.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00039.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00036.html vendor-advisory x_refsource_SUSE

Other References for CVE-2014-1568 (3)

• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html x_refsource_CONFIRM
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html x_refsource_CONFIRM
• http://www.novell.com/support/kb/doc.php?id=7015701 x_refsource_CONFIRM

• https://www.cve.org/CVERecord?id=CVE-2014-1568

Same Patch Batch · n/a · 2014-09-25 · 27 CVEs total

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2014-1568