NULL pointer dereference in Mozilla NSS - CVE-2016-5285

Vulnerability identifier: #VU4083

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-5285

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mozilla NSS
FlashSystem 900 9840-AE2 and 9843-AE2
FlashSystem 840 9840-AE1 & 9843-AE1
Ubuntu
IBM FlashSystem V9000
IBM Storwize V3500
IBM Storwize V7000
IBM Storwize V5000
IBM Storwize V3700

Install update from vendor's website.

Mozilla NSS - update to 3.25
IBM FlashSystem V9000 - addressed in versions 7.6.1.7, 7.7.1.6, 7.8.0.2, 7.8.1.0
IBM Storwize V3500 - addressed in versions 7.6.1.7, 7.7.1.6, 7.8.0.2, 7.8.1.0
IBM Storwize V7000 - addressed in versions 7.6.1.7, 7.7.1.6, 7.8.0.2, 7.8.1.0
IBM Storwize V5000 - addressed in versions 7.6.1.7, 7.7.1.6, 7.8.0.2, 7.8.1.0
IBM Storwize V3700 - addressed in versions 7.6.1.7, 7.7.1.6, 7.8.0.2, 7.8.1.0

• https://bugzilla.mozilla.org/show_bug.cgi?id=1306103
• https://bto.bluecoat.com/security-advisory/sa137
• https://hg-edge.mozilla.org/projects/nss/rev/45c047d18ac4

• Ubuntu update for NSS
• Multiple vulnerabilities in IBM FlashSystem models 840 and 900
• Multiple vulnerabilities in SAN Volume Controller, Storwize family and FlashSystem V9000 products
• Denial of service in Mozilla NSS