Mozilla Network Security Services up to 3.20.1 MD5 data processing
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
5.8 | $0-$5k | 0.00 |
A vulnerability, which was classified as critical, was found in Mozilla Network Security Services up to 3.20.1 (Web Browser). This affects an unknown part of the component MD5 Handler. The manipulation with an unknown input leads to a data processing vulnerability. CWE is classifying the issue as CWE-19. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
The weakness was shared 01/09/2016 by Karthikeyan Bhargavan (Website). It is possible to read the advisory at developer.mozilla.org. This vulnerability is uniquely identified as CVE-2015-7575 since 09/29/2015. The exploitability is told to be difficult. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available.
The vulnerability scanner Nessus provides a plugin with the ID 87780 (CentOS 6 / 7 : nss (CESA-2016:0007) (SLOTH)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CentOS Local Security Checks and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 350055 (Amazon Linux Security Advisory for java-1.8.0-openjdk: ALAS-2016-647).
Upgrading to version 3.20.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
The vulnerability is also documented in the vulnerability database at Tenable (87780). The entries 80544, 80547, 80548 and 80549 are related to this item.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.9VulDB Meta Temp Score: 5.8
VulDB Base Score: 5.9
VulDB Temp Score: 5.7
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 5.9
NVD Vector: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Data processingCWE: CWE-19
ATT&CK: Unknown
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 87780
Nessus Name: CentOS 6 / 7 : nss (CESA-2016:0007) (SLOTH)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
OpenVAS ID: 703436
OpenVAS Name: Debian Security Advisory DSA 3436-1 (openssl - security update)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Upgrade: Network Security Services 3.20.2
Timeline
09/29/2015 🔍12/22/2015 🔍
12/22/2015 🔍
01/07/2016 🔍
01/08/2016 🔍
01/08/2016 🔍
01/09/2016 🔍
01/10/2016 🔍
01/10/2016 🔍
07/02/2022 🔍
Sources
Vendor: mozilla.orgAdvisory: RHSA-2016:0007
Researcher: Karthikeyan Bhargavan
Status: Not defined
Confirmation: 🔍
CVE: CVE-2015-7575 (🔍)
OVAL: 🔍
SecurityTracker: 1034541
Vulnerability Center: 55588 - Mozilla Firefox <43.0.2, Firefox ESR <38.5.2 Remote Security Bypass of MD5 Signatures in NSS, Medium
SecurityFocus: 79684 - Mozilla Network Security Services CVE-2015-7575 Security Bypass Vulnerability
See also: 🔍
Entry
Created: 01/10/2016 20:14Updated: 07/02/2022 17:15
Changes: 01/10/2016 20:14 (66), 06/20/2018 08:45 (21), 07/02/2022 16:59 (5), 07/02/2022 17:07 (1), 07/02/2022 17:15 (1)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.