Wind River Support Network

HomeDefectsLIN6-14856

Fixed

LIN6-14856 : Security Advisory - nss - CVE-2016-9574

Created: Jul 31, 2018 Updated: Mar 8, 2020

Resolved Date: Mar 12, 2019

Found In Version: 6.0.0.37

Severity: Standard

Applicable for: Wind River Linux 6

Component/s: Userspace

Description

nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9574