CVE-2016-1978

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。Mozilla Network Security Services（NSS）是一个函数库（网络安全服务库），它可跨平台提供SSL、S/MIME和其他Internet安全标准支持。 Mozilla Firefox 44.0之前版本中使用的Mozilla NSS 3.21之前版本的‘ssl3_HandleECDHServerKeyExchange’函数中存在释放后重用漏洞，该漏洞源于程序在DHE和ECDHE握手期间没有成功分配

CVE-2016-1978 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。Mozilla Network Security Services（NSS）是一个函数库（网络安全服务库），它可跨平台提供SSL、S/MIME和其他Internet安全标准支持。 Mozilla Firefox 44.0之前版本中使用的Mozilla NSS 3.21之前版本 CVE-2016-1978 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2016-1978

I. Basic Information for CVE-2016-1978

Affected Products

II. Public POCs for CVE-2016-1978

III. Intelligence Information for CVE-2016-1978

Vendor Advisories for CVE-2016-1978 (12)

• http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html x_refsource_CONFIRM
• https://bugzilla.mozilla.org/show_bug.cgi?id=1209546 x_refsource_CONFIRM
• http://www.mozilla.org/security/announce/2016/mfsa2016-15.html x_refsource_CONFIRM
• http://www.securityfocus.com/bid/91787 vdb-entry x_refsource_BID
• http://www.securityfocus.com/bid/84275 vdb-entry x_refsource_BID
• http://www.securitytracker.com/id/1035258 vdb-entry x_refsource_SECTRACK
• http://www.debian.org/security/2016/dsa-3688 vendor-advisory x_refsource_DEBIAN
• http://www.ubuntu.com/usn/USN-2973-1 vendor-advisory x_refsource_UBUNTU
• http://rhn.redhat.com/errata/RHSA-2016-0684.html vendor-advisory x_refsource_REDHAT
• http://rhn.redhat.com/errata/RHSA-2016-0591.html vendor-advisory x_refsource_REDHAT
• 🔗 Mozilla Products: Multiple vulnerabilities (GLSA 201605-06) — Gentoo security Read full article vendor-advisory x_refsource_GENTOO
• http://rhn.redhat.com/errata/RHSA-2016-0685.html vendor-advisory x_refsource_REDHAT

Mailing List Discussions for CVE-2016-1978 (4)

• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html vendor-advisory x_refsource_SUSE

Other References for CVE-2016-1978 (4)

• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html x_refsource_CONFIRM
• http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html x_refsource_CONFIRM
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes x_refsource_MISC
• https://bto.bluecoat.com/security-advisory/sa124 x_refsource_CONFIRM

• https://www.cve.org/CVERecord?id=CVE-2016-1978

Same Patch Batch · n/a · 2016-03-13 · 47 CVEs total

Showing top 20 of 47 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2016-1978