Bug 21878

Summary: nss security vulnerability: CVE-2017-7805
Product: Mageia Reporter: Zombie Ryushu <zombie_ryushu>
Component: SecurityAssignee: Mageia Bug Squad <bugsquad>
Status: RESOLVED DUPLICATE QA Contact: Sec team <security>
Severity: normal    
Priority: Normal    
Version: Cauldron   
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: https://www.debian.org/security/2017/dsa-3998
Whiteboard:
Source RPM: nss CVE: CVE-2017-7805
Status comment:

Description Zombie Ryushu 2017-10-16 09:38:38 CEST 
Martin Thomson discovered that nss, the Mozilla Network Security Service library, is prone to a use-after-free vulnerability in the TLS 1.2 implementation when handshake hashes are generated. A remote attacker can take advantage of this flaw to cause an application using the nss library to crash, resulting in a denial of service, or potentially to execute arbitrary code.
Zombie Ryushu 2017-10-16 09:38:57 CEST

CVE: (none) => CVE-2017-7805

Comment 1 David Walser 2017-10-16 11:52:12 CEST 
https://advisories.mageia.org/CVE-2017-7805.html

*** This bug has been marked as a duplicate of bug 21785 ***

Resolution: (none) => DUPLICATE
Status: NEW => RESOLVED