CVE-2014-1569
published 2014-12-15CVE-2014-1569: The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure…
PriorityP343high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.18%
86.6th percentile
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nss | < nss 2:3.17.2-1.1 (bookworm) | nss 2:3.17.2-1.1 (bookworm) |
| mozilla | network_security_services | <= 3.16.2.3 | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | nss | >= 0 < 2:3.17.2-1.1 | 2:3.17.2-1.1 |
| mozilla | nss | >= 0 < 2:3.17.2-1.1 | 2:3.17.2-1.1 |
| mozilla | nss | >= 0 < 2:3.17.2-1.1 | 2:3.17.2-1.1 |
| mozilla | nss | >= 0 < 2:3.17.2-1.1 | 2:3.17.2-1.1 |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv10.0CRITICAL
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
NSS vulnerability
vendor_ubuntu·2015-01-07
CVE-2014-1569 NSS vulnerability
Title: NSS vulnerability
Summary: NSS could be made to expose sensitive information over the network.
It was discovered that NSS incorrectly handled certain ASN.1 lengths. A
remote attacker could possibly use this issue to perform a data-smuggling
attack.
Instructions: After a standard system update you need to restart any applications
that use NSS, such as Evolution and Chromium, to make all the necessary
changes.
Red Hat
nss: QuickDER decoder length issue
vendor_redhat·2014-12-01·CVSS 7.5
CVE-2014-1569 [HIGH] nss: QuickDER decoder length issue
nss: QuickDER decoder length issue
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
Debian
CVE-2014-1569: nss - The definite_length_decoder function in lib/util/quickder.c in Mozilla Network S...
vendor_debian·2014·CVSS 7.5
CVE-2014-1569 [HIGH] CVE-2014-1569: nss - The definite_length_decoder function in lib/util/quickder.c in Mozilla Network S...
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
Scope: local
bookworm: resolved (fixed in 2:3.17.2-1.1)
bullseye: resolved (fixed in 2:3.17.2-1.1)
forky: resolved (fixed in 2:3.17.2-1.1)
sid: resolved (fixed in 2:3.17.2-1.1)
trixie: resolved (fixed in 2:3.17.2-1.1)
GHSA
GHSA-r84h-wf26-r7jw: The definite_length_decoder function in lib/util/quickder
ghsa_unreviewed·2022-05-17
CVE-2014-1569 [HIGH] GHSA-r84h-wf26-r7jw: The definite_length_decoder function in lib/util/quickder
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
OSV
icu vulnerabilities
osv·2015-03-05·CVSS 10.0
CVE-2013-1569 icu vulnerabilities
icu vulnerabilities
It was discovered that ICU incorrectly handled memory operations when
processing fonts. If an application using ICU processed crafted data, an
attacker could cause it to crash or potentially execute arbitrary code with
the privileges of the user invoking the program. This issue only affected
Ubuntu 12.04 LTS. (CVE-2013-1569, CVE-2013-2383, CVE-2013-2384,
CVE-2013-2419)
It was discovered that ICU incorrectly handled memory operations when
processing fonts. If an application using ICU processed crafted data, an
attacker could cause it to crash or potentially execute arbitrary code with
the privileges of the user invoking the program. (CVE-2014-6585,
CVE-2014-6591)
It was discovered that ICU incorrectly handled memory operations when
processing regular expressions. If a
OSV
CVE-2014-1569: The definite_length_decoder function in lib/util/quickder
osv·2014-12-15·CVSS 7.5
CVE-2014-1569 [HIGH] CVE-2014-1569: The definite_length_decoder function in lib/util/quickder
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2014-1569 nss: QuickDER decoder length issue [fedora-all]
bugzilla·2014-12-15·CVSS 7.5
CVE-2014-1569 [HIGH] CVE-2014-1569 nss: QuickDER decoder length issue [fedora-all]
CVE-2014-1569 nss: QuickDER decoder length issue [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While on
Bugzilla
CVE-2014-1569 nss: QuickDER decoder length issue
bugzilla·2014-12-15·CVSS 7.5
CVE-2014-1569 [HIGH] CVE-2014-1569 nss: QuickDER decoder length issue
CVE-2014-1569 nss: QuickDER decoder length issue
Common Vulnerabilities and Exposures assigned an identifier CVE-2014-1569 to
the following vulnerability:
Name: CVE-2014-1569
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1569
Assigned: 20140116
Reference: http://www.intelsecurity.com/resources/wp-berserk-analysis-part-1.pdf
Reference: https://www.imperialviolet.org/2014/09/26/pkcs1.html
Reference: https://www.reddit.com/r/netsec/comments/2hd1m8/rsa_signature_forgery_in_nss/cksnr02
Reference: https://bugzilla.mozilla.org/show_bug.cgi?id=1064670
Reference: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.3_release_notes
The definite_length_decoder function in lib/util/quickder.c in Mozilla
Network Security Services (NSS) before 3.16.2.4 and 3.17.x befor
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.htmlhttp://www.debian.org/security/2015/dsa-3186http://www.intelsecurity.com/resources/wp-berserk-analysis-part-1.pdfhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlhttp://www.securitytracker.com/id/1032909https://bugzilla.mozilla.org/show_bug.cgi?id=1064670https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.3_release_noteshttps://www.imperialviolet.org/2014/09/26/pkcs1.htmlhttps://www.reddit.com/r/netsec/comments/2hd1m8/rsa_signature_forgery_in_nss/cksnr02http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.htmlhttp://www.debian.org/security/2015/dsa-3186http://www.intelsecurity.com/resources/wp-berserk-analysis-part-1.pdfhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlhttp://www.securitytracker.com/id/1032909https://bugzilla.mozilla.org/show_bug.cgi?id=1064670https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.3_release_noteshttps://www.imperialviolet.org/2014/09/26/pkcs1.htmlhttps://www.reddit.com/r/netsec/comments/2hd1m8/rsa_signature_forgery_in_nss/cksnr02
2014-12-15
Published