Oval Definition:oval:com.ubuntu.precise:def:20141490000
Revision Date:2014-02-06Version:1
Title:CVE-2014-1490 on Ubuntu 12.04 LTS (precise) - medium.
Description:Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-1490
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND Package Information
  • The 'firefox' package in precise was vulnerable but has been fixed (note: '27.0+build1-0ubuntu0.12.04.1').
  • OR NOT While related to the CVE in some way, the 'nss' package in precise is not affected.
  • OR The 'thunderbird' package in precise was vulnerable but has been fixed (note: '1:24.3.0+build2-0ubuntu0.12.04.1').
    • BACK