tocsin

Debian/nss: unknown

The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length

Action: Upgrade nss to 2:3.17.2-1.1 or later.

Affected

introducedfixedlast affected
02:3.17.2-1.1-

Fixed versions

2:3.17.2-1.1

Sources

published · modified · JSON