CVE-2013-1739: mozilla network_security_services
Vulnerability summary
CVE-2013-1739 is a medium (CVSS 5.0) vulnerability in mozilla network_security_services. EPSS estimates a 3.41% chance of exploitation in the next 30 days, higher than 88.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 4 · Related 1Timeline
- 22-10-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.41%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.41% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- nss< 2:3.15.2-1 | < 2:3.14.4-1
Mozilla1 product
- network_security_services≤ 3.15.1 | 3.12 | 3.12.1 | 3.12.2 | 3.12.3 | 3.12.3.1 | 3.12.3.2 | 3.12.4 | 3.12.5 | 3.12.6 | 3.12.7 | 3.12.8 | 3.12.9 | 3.12.10 | 3.12.11 | 3.14 | 3.14.1 | 3.14.2 | 3.14.3 | 3.15
2 vendors · 2 products
References
24 links- www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRM
- bugzilla.redhat.com/show_bug.cgi?id=1012656X Refsource CONFIRM
- www.vmware.com/security/advisories/VMSA-2014-0012.htmlX Refsource CONFIRM
- www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlX Refsource CONFIRM
- www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlX Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=894370X Refsource CONFIRM
Show all 24 references
- www.mozilla.org/security/announce/2013/mfsa2013-93.htmlX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19254VDB EntrySignatureX Refsource OVAL
- www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlX Refsource CONFIRM
- kb.juniper.net/InfoCenter/index?page=content&id=JSA10761X Refsource CONFIRM
- www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.htmlX Refsource CONFIRM