Test ID:	1.3.6.1.4.1.25623.1.0.871824
Category:	Red Hat Local Security Checks
Title:	RedHat Update for nss RHSA-2017:1364-01
Summary:	The remote host is missing an update for the 'nss'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'nss' package(s) announced via the referenced advisory. Vulnerability Insight: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): * A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library. (CVE-2017-7502) Bug Fix(es): * The Network Security Services (NSS) code and Certificate Authority (CA) list have been updated to meet the recommendations as published with the latest Mozilla Firefox Extended Support Release (ESR). The updated CA list improves compatibility with the certificates that are used in the Internet Public Key Infrastructure (PKI). To avoid certificate validation refusals, Red Hat recommends installing the updated CA list on June 12, 2017. (BZ#1448488) Affected Software/OS: nss on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7502 1038579 http://www.securitytracker.com/id/1038579 98744 http://www.securityfocus.com/bid/98744 DSA-3872 http://www.debian.org/security/2017/dsa-3872 RHSA-2017:1364 https://access.redhat.com/errata/RHSA-2017:1364 RHSA-2017:1365 https://access.redhat.com/errata/RHSA-2017:1365 RHSA-2017:1567 https://access.redhat.com/errata/RHSA-2017:1567 RHSA-2017:1712 https://access.redhat.com/errata/RHSA-2017:1712 http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html https://hg.mozilla.org/projects/nss/rev/55ea60effd0d
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.