Wind River Support Network

HomeDefectsLIN8-2440
Fixed

LIN8-2440 : Security Advisory - openssl & nss & gnutls - CVE-2015-7575

Created: Jan 11, 2016    Updated: Dec 3, 2018
Resolved Date: Jan 24, 2016
Previous ID: LIN5-21051
Found In Version: 8.0
Fix Version: 8.0.0.2
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision. 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575

Steps to Reproduce

-

Other Downloads


CVEs


Live chat
Online