Bug 827833 (CVE-2012-0441) - CVE-2012-0441 nss: NSS parsing errors with zero length items
Summary: CVE-2012-0441 nss: NSS parsing errors with zero length items
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2012-0441
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 830304 833480 834491 834492 834493 835017
Blocks: 827834
TreeView+ depends on / blocked
 
Reported: 2012-06-03 08:48 UTC by Huzaifa S. Sidhpurwala
Modified: 2019-09-29 12:53 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-07-18 07:26:51 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2012:1090 0 normal SHIPPED_LIVE Moderate: nss and nspr security, bug fix, and enhancement update 2012-07-17 22:15:16 UTC
Red Hat Product Errata RHSA-2012:1091 0 normal SHIPPED_LIVE Moderate: nss, nspr, and nss-util security, bug fix, and enhancement update 2012-07-17 22:15:05 UTC

Description Huzaifa S. Sidhpurwala 2012-06-03 08:48:28 UTC 
Security researcher Kaspar Brand found a flaw in how the Network Security Services (NSS) ASN.1 decoder handles zero length items. Effects of this issue depend on the field. One known symptom is an unexploitable crash in handling OCSP responses. NSS also mishandles zero-length basic constraints, assuming default values for some types that should been rejected as malformed.

Reference:
http://www.mozilla.org/security/announce/2012/mfsa2012-39.html
Comment 2 Elio Maldonado Batiz 2012-06-19 01:06:44 UTC 
From https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2012-0441 this was addressed on nss-3.13.4.
Comment 4 Huzaifa S. Sidhpurwala 2012-06-22 05:11:03 UTC 
This issue does not affect the version of nss as shipped with Fedora 16 and 17, since its already updated to 3.13.4
Comment 7 errata-xmlrpc 2012-07-17 18:17:53 UTC 
This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2012:1091 https://rhn.redhat.com/errata/RHSA-2012-1091.html
Comment 8 errata-xmlrpc 2012-07-17 18:18:45 UTC 
This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2012:1090 https://rhn.redhat.com/errata/RHSA-2012-1090.html
Note You need to log in before you can comment on or make changes to this bug.