Oval Definition:oval:com.ubuntu.xenial:def:201619380000000
Revision Date:2016-01-31Version:1
Title:CVE-2016-1938 on Ubuntu 16.04 LTS (xenial) - medium.
Description:The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-1938
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • firefox package in xenial was vulnerable but has been fixed (note: '44.0+build3-0ubuntu1').
  • OR nss package in xenial, is related to the CVE in some way and has been fixed (note: '2:3.21-1ubuntu2').
  • OR thunderbird package in xenial was vulnerable but has been fixed (note: '1:38.8.0+build1-0ubuntu0.16.04.1').
    • BACK