CVE-2017-5462: debian debian_linux Incorrect Calculation
Vulnerability summary
CVE-2017-5462 is a medium (CVSS 5.3) Incorrect Calculation vulnerability in debian debian_linux. EPSS estimates a 2.59% chance of exploitation in the next 30 days, higher than 85% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 15 · Related 10Timeline
- 11-06-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- OSV · DebianEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS trend
Probability
2.59%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
-0.05 pp
From 2.64% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mozilla4 products
- firefox≥ unspecified, < 53 | < 45.9.0 | < 53.0 | 52.0
- firefox_esr≥ unspecified, < 45.9 | ≥ unspecified, < 52.1
- network_security_services< 3.28.4
- thunderbird≥ unspecified, < 52.1 | < 52.1.0
Debian3 products
- firefox-esr< 45.9.0esr-1
- nss< 2:3.26.2-1.1
- debian_linuxEOL8.0
Ubuntu3 products
- firefox< 53.0+build6-0ubuntu0.14.04.1 | < 53.0+build6-0ubuntu0.16.04.1
- nss< 2:3.28.4-0ubuntu0.14.04.1 | < 2:3.28.4-0ubuntu0.16.04.1
- thunderbird< 1:52.1.1+build1-0ubuntu0.14.04.1 | < 1:52.1.1+build1-0ubuntu0.16.04.1
Alpine1 product
- nss< 3.23-r1
4 vendors · 11 products
