CVE-2013-1741: mozilla network_security_services Numeric Errors

EPSS trend

Probability

3.89%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.89% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.89%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

28 links

www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRM
support.apple.com/kb/HT204941X Refsource CONFIRM
developer.mozilla.org/docs/NSS/NSS_3.15.3_release_notesX Refsource CONFIRM
www.vmware.com/security/advisories/VMSA-2014-0012.htmlX Refsource CONFIRM
www.debian.org/security/2014/dsa-2994Vendor AdvisoryX Refsource DEBIAN
www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlX Refsource CONFIRM
www.securityfocus.com/archive/1/534161/100/0/threadedMailing ListX Refsource BUGTRAQ
lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlVendor AdvisoryX Refsource APPLE
www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlX Refsource CONFIRM
bugzilla.mozilla.org/show_bug.cgi?id=925100X Refsource CONFIRM

Show all 28 references

www.securityfocus.com/bid/63736VDB EntryX Refsource BID
security.gentoo.org/glsa/201504-01Vendor AdvisoryX Refsource GENTOO
security.gentoo.org/glsa/glsa-201406-19.xmlVendor AdvisoryX Refsource GENTOO
www.ubuntu.com/usn/USN-2030-1Vendor AdvisoryX Refsource UBUNTU
www.ubuntu.com/usn/USN-2031-1Vendor AdvisoryX Refsource UBUNTU
www.ubuntu.com/usn/USN-2032-1Vendor AdvisoryX Refsource UBUNTU
rhn.redhat.com/errata/RHSA-2013-1791.htmlVendor AdvisoryX Refsource REDHAT
www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlX Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.htmlVendor AdvisoryX Refsource SUSE
kb.juniper.net/InfoCenter/index?page=content&id=JSA10761X Refsource CONFIRM
support.apple.com/kb/HT204942X Refsource CONFIRM
seclists.org/fulldisclosure/2014/Dec/23Mailing ListX Refsource FULLDISC
lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlVendor AdvisoryX Refsource APPLE
www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.htmlX Refsource CONFIRM
www.mozilla.org/security/announce/2013/mfsa2013-103.htmlX Refsource CONFIRM
lists.opensuse.org/opensuse-updates/2013-11/msg00080.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2013-1829.htmlVendor AdvisoryX Refsource REDHAT
security-tracker.debian.org/tracker/CVE-2013-1741Advisory

Related vulnerabilities

CVE-2018-18508debiannss+111.97%5y ago22-10-2020 20:14In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.CVE-2018-12384alpinenss+151.48%7y ago29-04-2019 14:22When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.CVE-2018-12404alpinenss+744.25%7y ago02-05-2019 16:40A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.CVE-2013-1739debiannss+13.41%12y ago22-10-2013 22:00Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.CVE-2013-1620canonicalubuntu_linux+153.72%13y ago08-02-2013 19:00The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.CVE-2013-1740debiannss+21.66%12y ago18-01-2014 22:00The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

All vulnerabilities innetwork_security_services

CVE-2013-1741: mozilla network_security_services Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References