CVE-2017-7502

Published May 30, 2017

Last updated 20 days ago

Overview

Description
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
Source
secalert@redhat.com
NVD status
Deferred

Risk scores

CVSS 3.0

Type
Primary
Base score
7.5
Impact score
3.6
Exploitability score
3.9
Vector string
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
5
Impact score
2.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

secalert@redhat.com
CWE-476
nvd@nist.gov
CWE-476

Social media

Hype score
Not currently trending

Configurations