Wind River Support Network

HomeDefectsLIN7-5416
Fixed

LIN7-5416 : Security Advisory - openssl & nss & gnutls - CVE-2015-7575

Created: Jan 11, 2016    Updated: Sep 8, 2018
Resolved Date: Jan 18, 2016
Previous ID: LIN5-21050
Found In Version: 7.0.0.11
Fix Version: 7.0.0.13
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision. 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575

Steps to Reproduce

-

Other Downloads


CVEs


Live chat
Online