High severity8.8NVD Advisory· Published Mar 13, 2016· Updated Jun 17, 2026

CVE-2016-1950

Description

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

118

Mozilla Corporation/Firefox15 versions
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=44.0.2
- cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.6.1:*:*:*:*:*:*:*
- (no CPE)range: <45.0
Mozilla Corporation/Network Security Services5 versions
cpe:2.3:a:mozilla:network_security_services:3.19.2:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:mozilla:network_security_services:3.19.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:network_security_services:3.20:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:network_security_services:3.20.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:network_security_services:3.21:*:*:*:*:*:*:*
- (no CPE)range: <3.19.2.3, >=3.20.0 <3.21.1
Oracle Corporation/Glassfish Server
cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*
Oracle Corporation/Iplanet Web Proxy Server
cpe:2.3:a:oracle:iplanet_web_proxy_server:4.0:*:*:*:*:*:*:*
Oracle Corporation/Iplanet Web Server
cpe:2.3:a:oracle:iplanet_web_server:7.0:*:*:*:*:*:*:*
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <=9.2.1
Apple Inc./Mac OS X
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Range: <=10.11.3
Apple Inc./tvOS
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Range: <=9.1
Apple Inc./watchOS
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Range: <=2.1
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
Oracle Corporation/Linux3 versions
cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
Oracle Corporation/VM Server
cpe:2.3:o:oracle:vm_server:3.2:*:*:*:*:*:*:*
osv-coords86 versions
pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/mozilla-nss&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweed pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%202.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%205 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Manager%202.1 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20OpenStack%20Cloud%205 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Manager%202.1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20OpenStack%20Cloud%205
< 128.5.1-1.1+ 85 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 50.1.0-1.1
- (no CPE)range: < 3.26.2-1.1
- (no CPE)range: < 45.5.1-1.1
- (no CPE)range: < 1.8.0.121-23.4
- (no CPE)range: < 1.8.0.121-23.4
- (no CPE)range: < 1.8.0.121-23.4
- (no CPE)range: < 1.8.0.121-23.4
- (no CPE)range: < 1.8.0.121-23.4
- (no CPE)range: < 1.8.0.121-23.4
- (no CPE)range: < 1.8.0.121-23.4
- (no CPE)range: < 38.7.0esr-37.3
- (no CPE)range: < 38.7.0esr-63.3
- (no CPE)range: < 38.7.0esr-63.3
- (no CPE)range: < 45.9.0esr-105.1
- (no CPE)range: < 45.9.0esr-71.2
- (no CPE)range: < 38.7.0esr-36.3
- (no CPE)range: < 38.7.0esr-37.3
- (no CPE)range: < 38.7.0esr-37.3
- (no CPE)range: < 38.7.0esr-37.3
- (no CPE)range: < 38.7.0esr-63.3
- (no CPE)range: < 38.7.0esr-63.3
- (no CPE)range: < 45.9.0esr-105.1
- (no CPE)range: < 45.9.0esr-105.1
- (no CPE)range: < 45.9.0esr-105.1
- (no CPE)range: < 38.7.0esr-37.3
- (no CPE)range: < 38.7.0esr-63.3
- (no CPE)range: < 38.7.0esr-63.3
- (no CPE)range: < 45.9.0esr-105.1
- (no CPE)range: < 38.7.0esr-37.3
- (no CPE)range: < 38.7.0esr-63.3
- (no CPE)range: < 38.7.0esr-63.3
- (no CPE)range: < 45.9.0esr-105.1
- (no CPE)range: < 45.9.0esr-71.2
- (no CPE)range: < 45.9.0esr-71.2
- (no CPE)range: < 45.9.0esr-71.2
- (no CPE)range: < 4.12-24.1
- (no CPE)range: < 4.12-12.1
- (no CPE)range: < 4.12-12.1
- (no CPE)range: < 4.13.1-18.1
- (no CPE)range: < 4.13.1-32.1
- (no CPE)range: < 4.12-19.1
- (no CPE)range: < 4.12-24.1
- (no CPE)range: < 4.12-24.1
- (no CPE)range: < 4.12-24.1
- (no CPE)range: < 4.12-12.1
- (no CPE)range: < 4.12-12.1
- (no CPE)range: < 4.13.1-18.1
- (no CPE)range: < 4.13.1-18.1
- (no CPE)range: < 4.13.1-18.1
- (no CPE)range: < 4.12-24.1
- (no CPE)range: < 4.12-12.1
- (no CPE)range: < 4.12-12.1
- (no CPE)range: < 4.13.1-18.1
- (no CPE)range: < 4.12-24.1
- (no CPE)range: < 4.12-12.1
- (no CPE)range: < 4.12-12.1
- (no CPE)range: < 4.13.1-18.1
- (no CPE)range: < 4.13.1-32.1
- (no CPE)range: < 4.13.1-32.1
- (no CPE)range: < 4.13.1-32.1
- (no CPE)range: < 3.20.2-28.1
- (no CPE)range: < 3.20.2-40.1
- (no CPE)range: < 3.20.2-40.1
- (no CPE)range: < 3.29.5-57.1
- (no CPE)range: < 3.29.5-46.1
- (no CPE)range: < 3.20.2-20.1
- (no CPE)range: < 3.20.2-28.1
- (no CPE)range: < 3.20.2-28.1
- (no CPE)range: < 3.20.2-28.1
- (no CPE)range: < 3.20.2-40.1
- (no CPE)range: < 3.20.2-40.1
- (no CPE)range: < 3.29.5-57.1
- (no CPE)range: < 3.29.5-57.1
- (no CPE)range: < 3.29.5-57.1
- (no CPE)range: < 3.20.2-28.1
- (no CPE)range: < 3.20.2-40.1
- (no CPE)range: < 3.20.2-40.1
- (no CPE)range: < 3.29.5-57.1
- (no CPE)range: < 3.20.2-28.1
- (no CPE)range: < 3.20.2-40.1
- (no CPE)range: < 3.20.2-40.1
- (no CPE)range: < 3.29.5-57.1
- (no CPE)range: < 3.29.5-46.1
- (no CPE)range: < 3.29.5-46.1
- (no CPE)range: < 3.29.5-46.1

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.htmlnvdThird Party Advisory
www.mozilla.org/security/announce/2016/mfsa2016-35.htmlnvdVendor Advisory
www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlnvdThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlnvdThird Party Advisory
www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlnvdThird Party Advisory
support.apple.com/HT206166nvdThird Party Advisory
support.apple.com/HT206167nvdThird Party Advisory
support.apple.com/HT206168nvdThird Party Advisory
support.apple.com/HT206169nvdThird Party Advisory
lists.apple.com/archives/security-announce/2016/Mar/msg00000.htmlnvdMailing List
lists.apple.com/archives/security-announce/2016/Mar/msg00001.htmlnvdMailing List
lists.apple.com/archives/security-announce/2016/Mar/msg00002.htmlnvdMailing List
lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlnvdMailing List
bugzilla.mozilla.org/show_bug.cginvdIssue Tracking
developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notesnvdRelease Notes
developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notesnvdRelease Notes
lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.htmlnvd
lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.htmlnvd
lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.htmlnvd
lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.htmlnvd
lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.htmlnvd
lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.htmlnvd
rhn.redhat.com/errata/RHSA-2016-0495.htmlnvd
www.debian.org/security/2016/dsa-3510nvd
www.debian.org/security/2016/dsa-3520nvd
www.debian.org/security/2016/dsa-3688nvd
www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlnvd
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlnvd
www.securityfocus.com/bid/84223nvd
www.securitytracker.com/id/1035215nvd
www.ubuntu.com/usn/USN-2917-1nvd
www.ubuntu.com/usn/USN-2917-2nvd
www.ubuntu.com/usn/USN-2917-3nvd
www.ubuntu.com/usn/USN-2924-1nvd
www.ubuntu.com/usn/USN-2934-1nvd
bto.bluecoat.com/security-advisory/sa119nvd
security.gentoo.org/glsa/201605-06nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000