{"action":"Upgrade nss to 2:3.20.1-1 or later.","affected":[{"fixed":"2:3.20.1-1","introduced":"0"}],"component":"nss","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2:3.20.1-1"],"id":"tcs_01M5NB9CM9MT1YEMVASEHSY473","modified_at":"2026-09-09T07:01:10.583338247Z","published_at":"2015-11-05T05:59:06.963Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-7182","https://security-tracker.debian.org/tracker/CVE-2015-7182"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-7182#Debian:14/nss","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-7182"}],"summary":"Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and"}