High severity7.5NVD Advisory· Published Nov 15, 2019· Updated Jun 17, 2026

CVE-2016-5285

Description

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

140

Mozilla Corporation/Network Security Servicesllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 3.24
osv-coords42 versions
pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%205 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Manager%202.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20OpenStack%20Cloud%205 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%202.1 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA
< 45.5.1esr-63.1+ 41 more
- (no CPE)range: < 45.5.1esr-63.1
- (no CPE)range: < 45.5.1esr-59.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 45.5.1esr-59.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 45.5.1esr-59.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 45.5.1esr-59.1
- (no CPE)range: < 45.5.1esr-59.1
- (no CPE)range: < 45.5.1esr-59.1
- (no CPE)range: < 3.21.3-30.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 45.5.0esr-88.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 3.21.3-50.1
- (no CPE)range: < 45.5.1esr-59.1
- (no CPE)range: < 45.5.1esr-59.1
- (no CPE)range: < 3.21.3-39.1
- (no CPE)range: < 45.5.1esr-59.1
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server3 versions
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Server
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
Avaya/Aura Application Server 530014 versions
cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp3:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp5:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp7:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp10:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp10.1:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp11:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp11.1:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.1:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.2:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.3:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_application_server_5300:3.0:sp12.5:*:*:*:*:*:*
Avaya/Aura Communication Manager4 versions
cpe:2.3:a:avaya:aura_communication_manager:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:avaya:aura_communication_manager:*:*:*:*:*:*:*:*range: >=6.0,<=6.3.117.0
- cpe:2.3:a:avaya:aura_communication_manager:7.0:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_communication_manager:7.0:sp:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_communication_manager:7.0:sp3:*:*:*:*:*:*
Avaya/Aura Conferencing9 versions
cpe:2.3:a:avaya:aura_conferencing:8.0:sp7:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:avaya:aura_conferencing:8.0:sp7:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_conferencing:8.0:sp8:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_conferencing:8.0:sp9:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_conferencing:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_conferencing:7.2:*:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_conferencing:8.0:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_conferencing:8.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_conferencing:8.0:sp4:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_conferencing:8.0:sp5:*:*:*:*:*:*
Mozilla Corporation/Nss
cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*
Range: <3.26
Avaya/Aura Application Enablement Services2 versions
cpe:2.3:a:avaya:aura_application_enablement_services:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:avaya:aura_application_enablement_services:*:*:*:*:*:*:*:*range: >=6.1,<=6.3.3
- cpe:2.3:a:avaya:aura_application_enablement_services:7.0:*:*:*:*:*:*:*
Avaya/Cs1000m Firmware
cpe:2.3:o:avaya:cs1000m_firmware:*:*:*:*:*:*:*:*
Range: >=7.0,<=7.6
Avaya/Cs1000e\/cs1000m Signaling Server Firmware
cpe:2.3:o:avaya:cs1000e\/cs1000m_signaling_server_firmware:*:*:*:*:*:*:*:*
Range: >=7.0,<=7.6
Avaya/IP Office21 versions
cpe:2.3:a:avaya:ip_office:9.1:sp10:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:avaya:ip_office:9.1:sp10:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp11:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp7:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp1:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp12:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp3:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp4:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp5:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp6:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:10.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:10.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:10.0:sp4:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp8:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:9.1:sp9:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:10.0:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:10.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:10.0:sp5:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:10.0:sp6:*:*:*:*:*:*
- cpe:2.3:a:avaya:ip_office:10.0:sp7:*:*:*:*:*:*
Avaya/Aura Communication Manager Messagint2 versions
cpe:2.3:a:avaya:aura_communication_manager_messagint:7.0:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:avaya:aura_communication_manager_messagint:7.0:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_communication_manager_messagint:7.0:sp1:*:*:*:*:*:*
Avaya/Breeze Platform
cpe:2.3:a:avaya:breeze_platform:*:*:*:*:*:*:*:*
Range: >=3.0,<=3.2
Avaya/Call Management System6 versions
cpe:2.3:a:avaya:call_management_system:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:avaya:call_management_system:*:*:*:*:*:*:*:*range: >=18.0.0.1,<=18.0.0.2
- cpe:2.3:a:avaya:call_management_system:17.0:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:call_management_system:17.0:r3:*:*:*:*:*:*
- cpe:2.3:a:avaya:call_management_system:17.0:r4:*:*:*:*:*:*
- cpe:2.3:a:avaya:call_management_system:17.0:r5:*:*:*:*:*:*
- cpe:2.3:a:avaya:call_management_system:17.0:r6:*:*:*:*:*:*
Avaya/Iq
cpe:2.3:a:avaya:iq:5.2.x:*:*:*:*:*:*:*
Avaya/Cs1000e Firmware
cpe:2.3:o:avaya:cs1000e_firmware:*:*:*:*:*:*:*:*
Range: >=7.0,<=7.6
Avaya/Aura Messaging5 versions
cpe:2.3:a:avaya:aura_messaging:6.3.3:-:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:avaya:aura_messaging:6.3.3:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_messaging:6.3.3:sp4:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_messaging:6.3.3:sp5:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_messaging:6.3:*:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_messaging:6.3.3:sp6:*:*:*:*:*:*
Avaya/Aura Experience Portal
cpe:2.3:a:avaya:aura_experience_portal:*:*:*:*:*:*:*:*
Range: >=6.0,<=7.1
Avaya/Aura Session Manager7 versions
cpe:2.3:a:avaya:aura_session_manager:7.0.1:sp1:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:avaya:aura_session_manager:7.0.1:sp1:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_session_manager:7.0.1:sp2:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_session_manager:*:*:*:*:*:*:*:*range: >=6.3,<=6.3.18
- cpe:2.3:a:avaya:aura_session_manager:7.0:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_session_manager:7.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_session_manager:7.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:avaya:aura_session_manager:7.0.1:-:*:*:*:*:*:*
Avaya/Aura System Manager
cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:*
Range: >=6.3,<=6.3.18
Avaya/Aura Utility Services
cpe:2.3:a:avaya:aura_utility_services:*:*:*:*:*:*:*:*
Range: >=6.3,<=6.3.14
Avaya/Proactive Contact
cpe:2.3:a:avaya:proactive_contact:*:*:*:*:*:*:*:*
Range: >=5.0,<=5.1.2
Avaya/Session Border Controller For Enterprise Firmware
cpe:2.3:o:avaya:session_border_controller_for_enterprise_firmware:*:*:*:*:*:*:*:*
Range: >=6.2,<=6.3
Avaya/Aura System Platform Firmware
cpe:2.3:o:avaya:aura_system_platform_firmware:*:*:*:*:*:*:*:*
Range: >=6.3,<=6.4.0
Avaya/Meeting Exchange2 versions
cpe:2.3:a:avaya:meeting_exchange:6.2:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:avaya:meeting_exchange:6.2:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:meeting_exchange:6.2:sp3:*:*:*:*:*:*
Avaya/Message Networking
cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*
Range: >=5.2,<=6.3
Avaya/One X Client Enablement Services4 versions
cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:-:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:-:*:*:*:*:*:*
- cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp1:*:*:*:*:*:*
- cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp2:*:*:*:*:*:*
- cpe:2.3:a:avaya:one-x_client_enablement_services:6.2:sp5:*:*:*:*:*:*

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2016-5285

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions