CVE-2014-1569

Mozilla NSS <3.16.2.4-3.17.3 - Data Smuggling

Title source: llm

Description

The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.

References (15)

Core 15

Core References

Exploit x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=1064670

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Vendor Advisory x_refsource_confirm

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.3_release_notes

Exploit x_refsource_misc

http://www.intelsecurity.com/resources/wp-berserk-analysis-part-1.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1032909

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html

Exploit x_refsource_misc

https://www.imperialviolet.org/2014/09/26/pkcs1.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3186

Exploit x_refsource_misc

https://www.reddit.com/r/netsec/comments/2hd1m8/rsa_signature_forgery_in_nss/cksnr02

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html

Scores

EPSS 0.0364

EPSS Percentile 88.0%

Details

Status published

Products (7)

mozilla/network_security_services 3.16.2.0

mozilla/network_security_services 3.16.2.1

mozilla/network_security_services 3.16.2.2

mozilla/network_security_services 3.17.0

mozilla/network_security_services 3.17.1

mozilla/network_security_services 3.17.2

mozilla/network_security_services < 3.16.2.3

Published Dec 15, 2014

Tracked Since Feb 18, 2026