Bug 1124571 (CVE-2018-18508)

Summary:	VUL-0: CVE-2018-18508: mozilla-nss: NULL pointer dereference in several CMS functions resulting in a denial of service
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Marcus Meissner <meissner>
Component:	Incidents	Assignee:	Security Team bot <security-team>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P3 - Medium	CC:	smash_bz, wolfgang.frisch
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/224360/
Whiteboard:	CVSSv3:RedHat:CVE-2018-18508:6.5:(AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSSv3:SUSE:CVE-2018-18508:6.5:(AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Marcus Meissner 2019-02-07 07:34:04 UTC

rh#1671310


A NULL pointer dereference issue was found in several CMS function. A specially crafted data could possibly crash nss.

External References:

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1671310
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18508