QwikSec

Security Database

CVE

CWE

Training

CVE-2015-7575

Published: Jan 9, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_DEBIAN

openSUSE-SU-2016:0272

vendor-advisory

x_refsource_SUSE

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_GENTOO

openSUSE-SU-2016:0279

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2016:0161

vendor-advisory

x_refsource_SUSE

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_DEBIAN

https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes

x_refsource_CONFIRM

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

x_refsource_CONFIRM

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

https://bugzilla.mozilla.org/show_bug.cgi?id=1158489

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

x_refsource_CONFIRM

openSUSE-SU-2016:0270

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2016:0308

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_UBUNTU

openSUSE-SU-2015:2405

vendor-advisory

x_refsource_SUSE

https://security.netapp.com/advisory/ntap-20160225-0001/

x_refsource_CONFIRM

SUSE-SU-2016:0269

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_DEBIAN

openSUSE-SU-2016:0263

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_UBUNTU

SUSE-SU-2016:0256

vendor-advisory

x_refsource_SUSE

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

http://www.mozilla.org/security/announce/2015/mfsa2015-150.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_GENTOO

vendor-advisory

x_refsource_REDHAT

openSUSE-SU-2016:0488

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_GENTOO

vendor-advisory

x_refsource_UBUNTU

openSUSE-SU-2016:0162

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2016:0605

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

openSUSE-SU-2016:0268

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2016:0307

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_DEBIAN

SUSE-SU-2016:0265

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_UBUNTU

vdb-entry

x_refsource_SECTRACK

openSUSE-SU-2016:0007

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.