1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-5892-2

[USN-5892-2] NSS vulnerability

Severity High
Affected Packages 10
CVEs 1
Info Packages Vulnerabilities

NSS could be made to crash if it received a specially crafted certificate.

USN-5892-1 fixed a vulnerability in NSS. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Christian Holler discovered that NSS incorrectly handled certain PKCS 12
certificated bundles. A remote attacker could use this issue to cause NSS
to crash, leading to a denial of service, or possibly execute arbitrary
code. (CVE-2023-0767)

Package Affected Version
pkg:deb/ubuntu/libnss3?distro=xenial < 3.28.4-0ubuntu0.16.04.14+esm4
pkg:deb/ubuntu/libnss3?distro=trusty < 3.28.4-0ubuntu0.14.04.5+esm12
pkg:deb/ubuntu/libnss3-tools?distro=xenial < 3.28.4-0ubuntu0.16.04.14+esm4
pkg:deb/ubuntu/libnss3-tools?distro=trusty < 3.28.4-0ubuntu0.14.04.5+esm12
pkg:deb/ubuntu/libnss3-nssdb?distro=xenial < 3.28.4-0ubuntu0.16.04.14+esm4
pkg:deb/ubuntu/libnss3-nssdb?distro=trusty < 3.28.4-0ubuntu0.14.04.5+esm12
pkg:deb/ubuntu/libnss3-dev?distro=xenial < 3.28.4-0ubuntu0.16.04.14+esm4
pkg:deb/ubuntu/libnss3-dev?distro=trusty < 3.28.4-0ubuntu0.14.04.5+esm12
pkg:deb/ubuntu/libnss3-1d?distro=xenial < 3.28.4-0ubuntu0.16.04.14+esm4
pkg:deb/ubuntu/libnss3-1d?distro=trusty < 3.28.4-0ubuntu0.14.04.5+esm12
ID
USN-5892-2
Severity
high
Severity from
CVE-2023-0767
URL
https://ubuntu.com/security/notices/USN-5892-2
Published
2023-03-06T16:26:06
(18 months ago)
Modified
2023-03-06T16:26:06
(18 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/libnss3?distro=xenial ubuntu libnss3 < 3.28.4-0ubuntu0.16.04.14+esm4 xenial
Affected pkg:deb/ubuntu/libnss3?distro=trusty ubuntu libnss3 < 3.28.4-0ubuntu0.14.04.5+esm12 trusty
Affected pkg:deb/ubuntu/libnss3-tools?distro=xenial ubuntu libnss3-tools < 3.28.4-0ubuntu0.16.04.14+esm4 xenial
Affected pkg:deb/ubuntu/libnss3-tools?distro=trusty ubuntu libnss3-tools < 3.28.4-0ubuntu0.14.04.5+esm12 trusty
Affected pkg:deb/ubuntu/libnss3-nssdb?distro=xenial ubuntu libnss3-nssdb < 3.28.4-0ubuntu0.16.04.14+esm4 xenial
Affected pkg:deb/ubuntu/libnss3-nssdb?distro=trusty ubuntu libnss3-nssdb < 3.28.4-0ubuntu0.14.04.5+esm12 trusty
Affected pkg:deb/ubuntu/libnss3-dev?distro=xenial ubuntu libnss3-dev < 3.28.4-0ubuntu0.16.04.14+esm4 xenial
Affected pkg:deb/ubuntu/libnss3-dev?distro=trusty ubuntu libnss3-dev < 3.28.4-0ubuntu0.14.04.5+esm12 trusty
Affected pkg:deb/ubuntu/libnss3-1d?distro=xenial ubuntu libnss3-1d < 3.28.4-0ubuntu0.16.04.14+esm4 xenial
Affected pkg:deb/ubuntu/libnss3-1d?distro=trusty ubuntu libnss3-1d < 3.28.4-0ubuntu0.14.04.5+esm12 trusty
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date