{"action":"Upgrade nss to 2:3.16.3-1 or later.","affected":[{"fixed":"2:3.16.3-1","introduced":"0"}],"component":"nss","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2:3.16.3-1"],"id":"tcs_01M5NAPWDVT4RN7SCA031HXQ1X","modified_at":"2026-10-23T15:47:38.636796274Z","published_at":"2014-07-23T11:12:42.777Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-1544","https://security-tracker.debian.org/tracker/CVE-2014-1544"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-1544#Debian:14/nss","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-1544"}],"summary":"Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thu"}