Debian: 2790-1: nss: uninitialized memory read

Posted by Ridcully on Nov 5, 2013 2:32 AM
By LinuxSecurity.com
Mail this story
Web version

A flaw was found in the way the Mozilla Network Security Service library (nss) read uninitialized data when there was a decryption failure. A remote attacker could use this flaw to cause a denial of service (application crash) for applications linked with the nss library.

Full Story

Printed at http://lxer.com/module/newswire/view/193841/index.html