CVE-2019-17006

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_rox_mx5000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rox_mx5000:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_rox_rx1400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rox_rx1400:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_rox_rx1500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rox_rx1500:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_rox_rx1501_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rox_rx1501:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_rox_rx1510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rox_rx1510:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_rox_rx1511_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rox_rx1511:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_rox_rx1512_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rox_rx1512:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_rox_rx5000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rox_rx5000:-:*:*:*:*:*:*:*

Configuration 9 (hide)

cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*

Configuration 10 (hide)

OR cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-10-22 21:15

Updated : 2024-02-28 18:08


NVD link : CVE-2019-17006

Mitre link : CVE-2019-17006

CVE.ORG link : CVE-2019-17006


JSON object : View

Products Affected

siemens

  • ruggedcom_rox_rx5000
  • ruggedcom_rox_rx1511
  • ruggedcom_rox_rx1501_firmware
  • ruggedcom_rox_mx5000_firmware
  • ruggedcom_rox_rx1510
  • ruggedcom_rox_rx1510_firmware
  • ruggedcom_rox_rx1400_firmware
  • ruggedcom_rox_rx1400
  • ruggedcom_rox_rx1512
  • ruggedcom_rox_rx1501
  • ruggedcom_rox_rx1500
  • ruggedcom_rox_rx1512_firmware
  • ruggedcom_rox_rx1511_firmware
  • ruggedcom_rox_rx5000_firmware
  • ruggedcom_rox_mx5000
  • ruggedcom_rox_rx1500_firmware

netapp

  • hci_compute_node
  • hci_management_node
  • solidfire
  • hci_storage_node

mozilla

  • network_security_services
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-20

Improper Input Validation