CVEvulnerability
CVE-2015-2730
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-07-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-310
Description
Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.
Affected configurations
• novell suse linux enterprise software development kit 12.0
• debian debian linux 7.0
• debian debian linux 8.0
• novell suse linux enterprise desktop 12.0
• novell suse linux enterprise server 11
• novell suse linux enterprise server 12.0
• mozilla network security services (<= 3.19)
• oracle solaris 11.3
• oracle vm server 3.2
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1664.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1699.html rhn.redhat.com
- http://www.debian.org/security/2015/dsa-3336 www.debian.org
- http://www.mozilla.org/security/announce/2015/mfsa2015-64.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Third Party Advisory
- http://www.securityfocus.com/bid/75541 www.securityfocus.com
- http://www.securityfocus.com/bid/83399 www.securityfocus.com
- http://www.securitytracker.com/id/1032783 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2656-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2656-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2672-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1125025 Issue Tracking
- https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes Vendor Advisory
- https://security.gentoo.org/glsa/201512-10 security.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1664.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1699.html rhn.redhat.com
- http://www.debian.org/security/2015/dsa-3336 www.debian.org
- http://www.mozilla.org/security/announce/2015/mfsa2015-64.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Third Party Advisory
- http://www.securityfocus.com/bid/75541 www.securityfocus.com
- http://www.securityfocus.com/bid/83399 www.securityfocus.com
- http://www.securitytracker.com/id/1032783 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2656-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2656-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2672-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1125025 Issue Tracking
- https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes Vendor Advisory
- https://security.gentoo.org/glsa/201512-10 security.gentoo.org