CVE-2013-1739

Publication date 16 October 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.

Status

Package Ubuntu Release Status
firefox 13.10 saucy
Fixed 25.0+build3-0ubuntu0.13.10.1
13.04 raring
Fixed 25.0+build3-0ubuntu0.13.04.1
12.10 quantal
Fixed 25.0+build3-0ubuntu0.12.10.1
12.04 LTS precise
Fixed 25.0+build3-0ubuntu0.12.04.1
10.04 LTS lucid Ignored end of life
nss 13.10 saucy
Fixed 2:3.15.3-0ubuntu0.13.10.1
13.04 raring
Fixed 2:3.15.3-0ubuntu0.13.04.1
12.10 quantal
Fixed 3.15.3-0ubuntu0.12.10.1
12.04 LTS precise
Fixed 3.15.3-0ubuntu0.12.04.1
10.04 LTS lucid
Fixed 3.15.3-0ubuntu0.10.04.1
thunderbird 13.10 saucy
Fixed 1:24.1.0+build1-0ubuntu0.13.10.1
13.04 raring
Fixed 1:24.1.0+build1-0ubuntu0.13.04.1
12.10 quantal
Fixed 1:24.1.0+build1-0ubuntu0.12.10.1
12.04 LTS precise
Fixed 1:24.1.0+build1-0ubuntu0.12.04.1
10.04 LTS lucid Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
nss

References

Related Ubuntu Security Notices (USN)

    • USN-2010-1
    • Thunderbird vulnerabilities
    • 31 October 2013
    • USN-2009-1
    • Firefox vulnerabilities
    • 29 October 2013

Other references