NetSight
medium5.9

CVE-2016-9574

nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.

Impact

nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.

Affected products

VendorProductAffected versions
MozillaNetwork Security Services
before 3.30

Weakness classification

References