Wind River Support Network

HomeDefectsLIN10-7860

Fixed

LIN10-7860 : Security Advisory - nss - CVE-2018-18508

Created: Oct 22, 2020 Updated: Dec 7, 2020

Resolved Date: Nov 23, 2020

Found In Version: 10.17.41.1

Fix Version: 10.17.41.23

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.

CREATE(Triage):(User=admin) [CVE-2018-18508|https://nvd.nist.gov/vuln/detail/CVE-2018-18508]

CVEs

CVE-2018-18508