CVEvulnerability
CVE-2017-5462
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-682
Description
A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Affected configurations
• debian debian linux 8.0
• mozilla firefox (< 45.9.0)
• mozilla firefox (< 53.0)
• mozilla firefox 52.0
• mozilla network security services (< 3.28.4)
• mozilla thunderbird (< 52.1.0)
Related
Weakness · CWE (1)
- CWE-682 Incorrect Calculation weakness
References
- http://www.securityfocus.com/bid/97940 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038320 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1345089 Issue Tracking
- https://security.gentoo.org/glsa/201705-04 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3831 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3872 Third Party Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-10/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-11/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-12/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-13/ Vendor Advisory
- http://www.securityfocus.com/bid/97940 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038320 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1345089 Issue Tracking
- https://security.gentoo.org/glsa/201705-04 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3831 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3872 Third Party Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-10/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-11/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-12/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-13/ Vendor Advisory