mozilla network-security-services CVE-2017-7502 is a vulnerability in Mozilla Network Security Services
Published on May 30, 2017

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Weakness Type

NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.


Products Associated with CVE-2017-7502

Want to know whenever a new CVE is published for Mozilla Network Security Services? stack.watch will email you.

Mozilla Network Security Services
 

Affected Versions

NSS project nss Version since 3.24.0 is affected by CVE-2017-7502

Exploit Probability

EPSS
2.09%
Percentile
83.79%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.