CVE-2013-5606

Publication date 14 November 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.

Status

Package Ubuntu Release Status
nss 13.10 saucy
Fixed 2:3.15.3-0ubuntu0.13.10.1
13.04 raring
Fixed 2:3.15.3-0ubuntu0.13.04.1
12.10 quantal
Fixed 3.15.3-0ubuntu0.12.10.1
12.04 LTS precise
Fixed 3.15.3-0ubuntu0.12.04.1
10.04 LTS lucid
Fixed 3.15.3-0ubuntu0.10.04.1

References

Related Ubuntu Security Notices (USN)

Other references