BID:107257

Mozilla Network Security Services CVE-2018-18508 Denial of Service Vulnerability

Info

Mozilla Network Security Services CVE-2018-18508 Denial of Service Vulnerability

Bugtraq ID:	107257
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-18508
Remote:	Yes
Local:	No
Published:	Jan 22 2019 12:00AM
Updated:	Jan 22 2019 12:00AM
Credit:	Hanno Böck and Damian Poddebniak.
Vulnerable:	Ubuntu Ubuntu Linux 18.10 Ubuntu Ubuntu Linux 18.04 LTS Ubuntu Ubuntu Linux 16.04 LTS Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 ESM Redhat Virtualization 4 Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Redhat Enterprise Linux 5 Mozilla Network Security Services (NSS) 3.40.1 Mozilla Network Security Services (NSS) 3.37.1 Mozilla Network Security Services (NSS) 3.36.5 Mozilla Network Security Services (NSS) 3.28.4 Mozilla Network Security Services (NSS) 3.28 Mozilla Network Security Services (NSS) 3.21.4 Mozilla Network Security Services (NSS) 3.21.1 Mozilla Network Security Services (NSS) 3.20.2 Mozilla Network Security Services (NSS) 3.20.1 Mozilla Network Security Services (NSS) 3.19.1 Mozilla Network Security Services (NSS) 3.17.3 Mozilla Network Security Services (NSS) 3.17.1 Mozilla Network Security Services (NSS) 3.15.4 Mozilla Network Security Services (NSS) 3.15.3 Mozilla Network Security Services (NSS) 3.15.2 Mozilla Network Security Services (NSS) 3.15.1 Mozilla Network Security Services (NSS) 3.14.5 Mozilla Network Security Services (NSS) 3.14.4 Mozilla Network Security Services (NSS) 3.12.10 Mozilla Network Security Services (NSS) 3.12.8 Mozilla Network Security Services (NSS) 3.12.5 Mozilla Network Security Services (NSS) 3.12.4 Mozilla Network Security Services (NSS) 3.12.3 Mozilla Network Security Services (NSS) 3.12.2 Mozilla Network Security Services (NSS) 3.12.1 Mozilla Network Security Services (NSS) 3.11.3 Mozilla Network Security Services (NSS) 3.9.2 Mozilla Network Security Services (NSS) 3.9 + Mozilla Browser 1.5 Mozilla Network Security Services (NSS) 3.8 + Galeon Galeon Browser 1.2.13 + Mozilla Browser 1.4.1 + Mozilla Browser 1.4.1 + Mozilla Browser 1.4 b + Mozilla Browser 1.4 b + Mozilla Browser 1.4 a + Mozilla Browser 1.4 a + Mozilla Browser 1.4 + Mozilla Browser 1.4 Mozilla Network Security Services (NSS) 3.7.7 Mozilla Network Security Services (NSS) 3.7.5 Mozilla Network Security Services (NSS) 3.7.3 Mozilla Network Security Services (NSS) 3.7.2 Mozilla Network Security Services (NSS) 3.7.1 Mozilla Network Security Services (NSS) 3.7 Mozilla Network Security Services (NSS) 3.6.1 Mozilla Network Security Services (NSS) 3.6 Mozilla Network Security Services (NSS) 3.5 Mozilla Network Security Services (NSS) 3.4.2 Mozilla Network Security Services (NSS) 3.4.1 Mozilla Network Security Services (NSS) 3.4 Mozilla Network Security Services (NSS) 3.3.2 Mozilla Network Security Services (NSS) 3.3.1 Mozilla Network Security Services (NSS) 3.3 Mozilla Network Security Services (NSS) 3.2.1 Mozilla Network Security Services (NSS) 3.2 Mozilla Network Security Services (NSS) 3.41 Mozilla Network Security Services (NSS) 3.40 Mozilla Network Security Services (NSS) 3.39 Mozilla Network Security Services (NSS) 3.38 Mozilla Network Security Services (NSS) 3.37 Mozilla Network Security Services (NSS) 3.36 Mozilla Network Security Services (NSS) 3.24.0 Mozilla Network Security Services (NSS) 3.23 Mozilla Network Security Services (NSS) 3.21 Mozilla Network Security Services (NSS) 3.20 Mozilla Network Security Services (NSS) 3.19.2.3 Mozilla Network Security Services (NSS) 3.17 Mozilla Network Security Services (NSS) 3.16.5 Mozilla Network Security Services (NSS) 3.16.2.1 Mozilla Network Security Services (NSS) 3.16 Mozilla Network Security Services (NSS) 3.15.5 Mozilla Network Security Services (NSS) 3.15.3.1 Mozilla Network Security Services (NSS) 3.15 Mozilla Network Security Services (NSS) 3.14.3 Mozilla Network Security Services (NSS) 3.14.2 Mozilla Network Security Services (NSS) 3.14.1 Mozilla Network Security Services (NSS) 3.14 Mozilla Network Security Services (NSS) 3.13.4 Mozilla Network Security Services (NSS) 3.13.3 Mozilla Network Security Services (NSS) 3.12.9 Mozilla Network Security Services (NSS) 3.12.7 Mozilla Network Security Services (NSS) 3.12.6 Mozilla Network Security Services (NSS) 3.12.3.2 Mozilla Network Security Services (NSS) 3.12.3.1 Mozilla Network Security Services (NSS) 3.12.11 Mozilla Network Security Services (NSS) 3.12 Mozilla Network Security Services (NSS) 3.11

Not Vulnerable:	Mozilla Network Security Services (NSS) 3.41.1

Exploit / POC

Mozilla Network Security Services CVE-2018-18508 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].