VDB
GCVE-110-MAGEIA-2014-391
GCVE-110-MAGEIA-2014-391
Advisory Published
Updated nss packages fix security vulnerability:
Antoine Delignat-Lavaud, security researcher at Inria Paris in team Prosecco,
reported an issue in Network Security Services (NSS) libraries affecting all
versions. He discovered that NSS is vulnerable to a variant of a signature
forgery attack previously published by Daniel Bleichenbacher. This is due to
lenient parsing of ASN.1 values involved in a signature and could lead to the
forging of RSA certificates (CVE-2014-1568).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | nss | 0 (affected), 3.17.1-1.mga3 (unaffected) | — |
| Mageia | nss | 0 (affected), 3.17.1-1.1.mga4 (unaffected) | — |
References
Browse GCVE Records
73,685 records in the GCVE database · Updated July 18, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.