Wind River Support Network


LIN6-10714 : Security Advisory - openssl & nss & gnutls - CVE-2015-7575

Created: Jan 11, 2016    Updated: Dec 3, 2018
Resolved Date: Jan 19, 2016
Previous ID: LIN5-21049
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

Steps to Reproduce


Other Downloads

Live chat