VYPR

Nss Esr

by Mozilla Corporation

CVEs (1)

  • CVE-2021-43527CriDec 8, 2021
    risk 0.65cvss 9.8epss 0.18

    NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be…