RHSA-2015:2068Critical

Red Hat Security Advisory: nss, nss-util, and nspr security update

Published
November 18, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (3)

CVE-2015-7181 →CVE-2015-7182 →CVE-2015-7183 →

📋 Description

CVE-2015-7181 — nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133) CVE-2015-7182 — nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133) CVE-2015-7183 — nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)

🎯 Affected products200

  • Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5)
  • Red Hat Enterprise Linux HPC Node EUS (v. 6.5)
  • Red Hat Enterprise Linux HPC Node EUS (v. 6.6)
  • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6)
  • Red Hat Enterprise Linux Server AUS (v. 6.2)
  • Red Hat Enterprise Linux Server AUS (v. 6.4)
  • Red Hat Enterprise Linux Server EUS (v. 6.5)
  • Red Hat Enterprise Linux Server EUS (v. 6.6)
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.4)
  • Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
  • Red Hat Enterprise Linux Server Optional EUS (v. 6.6)
  • nspr-0:4.10.6-2.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.src as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.src as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.src as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.5)
  • nspr-0:4.10.6-2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
  • nspr-0:4.10.8-2.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.6)
  • nspr-0:4.10.8-2.el6_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • nspr-0:4.10.8-2.el6_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • nspr-0:4.10.8-2.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • nspr-0:4.10.8-2.el6_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • nspr-0:4.10.8-2.el6_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • nspr-0:4.10.8-2.el6_6.src as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.6)
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (6)