| Package | Affected versions | Patched versions |
|---|---|---|
| network security services | < 3.46 | 3.46 |
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free