NetSight
IP …
high7.5

CVE-2016-5285

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMAC…

Impact

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

Affected products

VendorProductAffected versions
MozillaNss
before 3.26
DebianDebian Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux
Versions 5.0, 6.0, 7.0
SuseLinux Enterprise Server
Version 11
AvayaAura Application Enablement Services
from 6.1 through 6.3.3
Version 7.0
AvayaAura Application Server 5300
Version 3.0
AvayaAura Communication Manager
from 6.0 through 6.3.117.0
Version 7.0
AvayaAura Communication Manager Messagint
Version 7.0
AvayaBreeze Platform
from 3.0 through 3.2
AvayaCall Management System
from 18.0.0.1 through 18.0.0.2
Version 17.0
AvayaIq
Version 5.2.x
AvayaCs1000e Firmware
from 7.0 through 7.6

Weakness classification

CWE-476

References