Orta CVSS 5.9

CVE-2015-7575: Network Security Services: güvenlik açığı

Yayın: 9 Ocak 2016 04:59 · Güncelleme: 6 Kasım 2026 09:45

Açıklama (NVD)

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

Özet bilgiler

Ürün: Mozilla Network Security Services
CVSS v3.1: 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: %2,90 (yüzdelik 87)
CWE: CWE-19
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
mozilla-network-security-services	—	3.20.1	—
opensuse-leap	42.1	42.1	—
opensuse-opensuse	13.1	13.1	—
opensuse-opensuse	13.2	13.2	—
mozilla-firefox	38.0	38.0	—
mozilla-firefox	38.0.1	38.0.1	—
mozilla-firefox	38.0.5	38.0.5	—
mozilla-firefox	38.1.0	38.1.0	—
mozilla-firefox	38.1.1	38.1.1	—
mozilla-firefox	38.2.0	38.2.0	—
mozilla-firefox	38.2.1	38.2.1	—
mozilla-firefox	38.3.0	38.3.0	—
mozilla-firefox	38.4.0	38.4.0	—
mozilla-firefox	38.5.0	38.5.0	—
mozilla-firefox	38.5.1	38.5.1	—
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	15.04	15.04	—
canonical-ubuntu-linux	15.10	15.10	—
mozilla-firefox	—	43.0.1	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları