CVE-2014-1568

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 24-09-2014 02:00

Last modified: - 24-09-2014 02:00

Total changes: - 10

Description

CVE-2014-1568 nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:P/I:P/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

5.8

Base score

Exploitability score

Impact score

Verification logic

AND

product=nss-0 AND versionEndExcluding=3.12.10-10.el4

vendor=Red Hat Enterprise Linux AND product=rhel_els AND version=4

AND

product=nss-0 AND versionEndExcluding=3.16.1-4.el5_11

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=5

AND

product=nss-0 AND versionEndExcluding=3.12.8-10.el5_6

vendor=Red Hat Enterprise Linux AND product=rhel_mission_critical AND version=5.6

AND

product=nss-0 AND versionEndExcluding=3.14.3-10.el5_9

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=5.9

AND

product=nss-0 AND versionEndExcluding=3.16.1-7.el6_5

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=nss-softokn-0 AND versionEndExcluding=3.14.3-12.el6_5

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=nss-util-0 AND versionEndExcluding=3.16.1-2.el6_5

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=nss-0 AND versionEndExcluding=3.13.1-11.el6_2

vendor=Red Hat Enterprise Linux AND product=rhel_mission_critical AND version=6.2

AND

product=nss-softokn-0 AND versionEndExcluding=3.12.9-12.el6_2

vendor=Red Hat Enterprise Linux AND product=rhel_mission_critical AND version=6.2

AND

product=nss-util-0 AND versionEndExcluding=3.13.1-6.el6_2

vendor=Red Hat Enterprise Linux AND product=rhel_mission_critical AND version=6.2

AND

product=nss-0 AND versionEndExcluding=3.14.3-8.el6_4

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=6.4

AND

product=nss-softokn-0 AND versionEndExcluding=3.14.3-4.el6_4

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=6.4

AND

product=nss-util-0 AND versionEndExcluding=3.14.3-4.el6_4

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=6.4

AND

product=nss-0 AND versionEndExcluding=3.16.2-7.el7_0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=nss-softokn-0 AND versionEndExcluding=3.16.2-2.el7_0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=nss-util-0 AND versionEndExcluding=3.16.2-2.el7_0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=rhev-hypervisor6-0 AND versionEndExcluding=6.5-20140930.1.el6ev

vendor=Red Hat Enterprise Linux AND product=rhev_manager AND version=3

AND

product=nss AND version=

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=5.6

Reference

Keywords

CVE-2014-1568

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

REDHAT

CVE-2014-1568

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures