Home

CVE-2016-5285

Description

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.582

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2016-5285 are affected in Avaya Call Management System 17.0Windows
Vulnerabilities CVE-2016-5285 are affected in Avaya Call Management System 18.0.0.2Windows
Network Security Service library (USN-3029-1) libnss3_3.26.2-0ubuntu0.12.04.1_i386.debLinux
Network Security Service library (USN-3029-1) libnss3_3.26.2-0ubuntu0.12.04.1_amd64.debLinux
Network Security Service library (USN-3029-1) libnss3_3.26.2-0ubuntu0.14.04.3_i386.debLinux
Network Security Service library (USN-3029-1) libnss3_3.26.2-0ubuntu0.14.04.3_amd64.debLinux
Network Security Service library (USN-3029-1) libnss3_3.26.2-0ubuntu0.16.04.2_i386.debLinux
Network Security Service library (USN-3029-1) libnss3_3.26.2-0ubuntu0.16.04.2_amd64.debLinux
Network Security Service library (USN-3163-1) libnss3_3.26.2-0ubuntu0.12.04.1_i386.debLinux
Network Security Service library (USN-3163-1) libnss3_3.26.2-0ubuntu0.12.04.1_amd64.debLinux
Network Security Service library (USN-3163-1) libnss3_3.26.2-0ubuntu0.14.04.3_i386.debLinux
Network Security Service library (USN-3163-1) libnss3_3.26.2-0ubuntu0.14.04.3_amd64.debLinux
Network Security Service library (USN-3163-1) libnss3_3.26.2-0ubuntu0.16.04.2_i386.debLinux
Network Security Service library (USN-3163-1) libnss3_3.26.2-0ubuntu0.16.04.2_amd64.debLinux
Network Security Service library (USN-3163-1) libnss3_3.26.2-0ubuntu0.16.10.1_i386.debLinux
Network Security Service library (USN-3163-1) libnss3_3.26.2-0ubuntu0.16.10.1_amd64.debLinux
NULL Pointer Dereference Vulnerability (CVE-2016-5285)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234