VDB
GCVE-110-MAGEIA-2016-114
GCVE-110-MAGEIA-2016-114
Advisory Published
Updated rootcerts and nss packages fix security vulnerability:
A heap-based buffer overflow flaw was found in the way NSS parsed certain
ASN.1 structures. An attacker could use this flaw to create a specially
crafted certificate which, when parsed by NSS, could cause it to crash, or
execute arbitrary code, using the permissions of the user running an
application compiled against the NSS library (CVE-2016-1950).
This issue was supposed to have been fixed in MGASA-2016-0105, but Mozilla
did not include the fix until the following nss releases.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | nss | 0 (affected), 3.23.0-1.mga5 (unaffected), 0 (affected), 3.23.0-1.mga5 (unaffected) | — |
| Mageia | rootcerts | 0 (affected), 20160225.00-1.mga5 (unaffected), 0 (affected), 20160225.00-1.mga5 (unaffected) | — |
| Mageia | xfce4-weather-plugin | 0 (affected), 0.8.8-1.1.mga5 (unaffected) | — |
References
Browse GCVE Records
73,053 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.