Debian/nss: high 8.8
When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox < 128 and Thunderbird < 128.
Action: Upgrade nss to 2:3.87.1-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:3.87.1-1+deb12u1 | - |
Fixed versions
| 2:3.87.1-1+deb12u1 |
Sources
published · modified · JSON