Oval Definition:oval:org.mitre.oval:def:20606
Revision Date:2014-06-30Version:82
Title:RHSA-2013:1829: nss, nspr, and nss-util security update (Important)
Description:Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CESA-2013:1829
CVE-2013-1739
CVE-2013-1741
CVE-2013-5605
CVE-2013-5606
CVE-2013-5607
RHSA-2013:1829-00
Platform(s):CentOS Linux 6
Red Hat Enterprise Linux 6
Product(s):nspr
nss
nss-util
Definition Synopsis
  • Redhat 6 or Centos 6 release
  • The operating system installed on the system is Red Hat Enterprise Linux 6
  • OR The operating system installed on the system is CentOS Linux 6.x
  • AND Packages section
  • nspr is earlier than 0:4.10.2-1.el6_5
  • OR nspr-devel is earlier than 0:4.10.2-1.el6_5
  • OR nss-util-devel is earlier than 0:3.15.3-1.el6_5
  • OR nss-util is earlier than 0:3.15.3-1.el6_5
  • OR nss-tools is earlier than 0:3.15.3-2.el6_5
  • OR nss-devel is earlier than 0:3.15.3-2.el6_5
  • OR nss-sysinit is earlier than 0:3.15.3-2.el6_5
  • OR nss is earlier than 0:3.15.3-2.el6_5
  • OR nss-pkcs11-devel is earlier than 0:3.15.3-2.el6_5
  • BACK