CVE-2019-17006

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20 CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Oct 22, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-170077.5In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service CVE-2019-170088.8When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vu CVE-2019-170097.8When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to lo CVE-2019-17014.8Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) CVE-2019-170107.5Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have c CVE-2019-170117.5Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free CVE-2019-170128.8Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corr CVE-2019-170138.8Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corruption and we presume CVE-2019-170147.4If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in CVE-2019-170158.8During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially explo CVE-2019-170166.1When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This CVE-2019-170178.8Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough e