CVE ID:	CVE-2016-1938
Description:	The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.
Test IDs:	1.3.6.1.4.1.25623.1.0.703688   1.3.6.1.4.1.25623.1.1.1.2.2016.480   1.3.6.1.4.1.25623.1.0.842646   1.3.6.1.4.1.25623.1.1.1.2.2016.427   1.3.6.1.4.1.25623.1.2.1.2016.07   1.3.6.1.4.1.25623.1.0.842660
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1938 BugTraq ID: 81955 http://www.securityfocus.com/bid/81955 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 Debian Security Information: DSA-3688 (Google Search) http://www.debian.org/security/2016/dsa-3688 https://security.gentoo.org/glsa/201605-06 https://security.gentoo.org/glsa/201701-46 https://blog.fuzzing-project.org/37-Mozilla-NSS-Wrong-calculation-results-in-mp_div-and-mp_exptmod.html https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_div.c https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_exptmod.c http://www.securitytracker.com/id/1034825 SuSE Security Announcement: SUSE-SU-2016:0338 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:0306 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html SuSE Security Announcement: openSUSE-SU-2016:0309 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html http://www.ubuntu.com/usn/USN-2880-1 http://www.ubuntu.com/usn/USN-2880-2 http://www.ubuntu.com/usn/USN-2903-1 http://www.ubuntu.com/usn/USN-2903-2 http://www.ubuntu.com/usn/USN-2973-1