Mozilla Network Security Services vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mozilla Network Security Services: 1 record(s), with affected versions and fixes.cpe:2.3:a:mozilla:network_security_services
CVE-2015-7575
Medium · 5.9
CWE-19 Jan 9, 2016
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.