CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-5285

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.6%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2016-5285

Avaya » Aura Application Enablement Services » Version: 6.1

cpe:2.3:a:avaya:aura_application_enablement_services:6.1
Avaya » Aura Application Enablement Services » Version: 6.3.3

cpe:2.3:a:avaya:aura_application_enablement_services:6.3.3
Avaya » Aura Application Enablement Services » Version: 7.0

cpe:2.3:a:avaya:aura_application_enablement_services:7.0
Avaya » Aura Application Server 5300 » Version: 3.0

cpe:2.3:a:avaya:aura_application_server_5300:3.0
Avaya » Aura Communication Manager » Version: 6.0

cpe:2.3:a:avaya:aura_communication_manager:6.0
Avaya » Aura Communication Manager » Version: 6.3.0.1

cpe:2.3:a:avaya:aura_communication_manager:6.3.0.1
Avaya » Aura Communication Manager » Version: 6.3.1.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.1.0
Avaya » Aura Communication Manager » Version: 6.3.10.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.10.0
Avaya » Aura Communication Manager » Version: 6.3.11.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.11.0
Avaya » Aura Communication Manager » Version: 6.3.11.1

cpe:2.3:a:avaya:aura_communication_manager:6.3.11.1
Avaya » Aura Communication Manager » Version: 6.3.111.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.111.0
Avaya » Aura Communication Manager » Version: 6.3.112.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.112.0
Avaya » Aura Communication Manager » Version: 6.3.114.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.114.0
Avaya » Aura Communication Manager » Version: 6.3.115.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.115.0
Avaya » Aura Communication Manager » Version: 6.3.116.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.116.0
Avaya » Aura Communication Manager » Version: 6.3.117.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.117.0
Avaya » Aura Communication Manager » Version: 6.3.12.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.12.0
Avaya » Aura Communication Manager » Version: 6.3.13.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.13.0
Avaya » Aura Communication Manager » Version: 6.3.14.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.14.0
Avaya » Aura Communication Manager » Version: 6.3.15.1

cpe:2.3:a:avaya:aura_communication_manager:6.3.15.1
Avaya » Aura Communication Manager » Version: 6.3.16.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.16.0
Avaya » Aura Communication Manager » Version: 6.3.17.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.17.0
Avaya » Aura Communication Manager » Version: 6.3.2.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.2.0
Avaya » Aura Communication Manager » Version: 6.3.2.1

cpe:2.3:a:avaya:aura_communication_manager:6.3.2.1
Avaya » Aura Communication Manager » Version: 6.3.4.1

cpe:2.3:a:avaya:aura_communication_manager:6.3.4.1
Avaya » Aura Communication Manager » Version: 6.3.6.1

cpe:2.3:a:avaya:aura_communication_manager:6.3.6.1
Avaya » Aura Communication Manager » Version: 6.3.7.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.7.0
Avaya » Aura Communication Manager » Version: 6.3.7.1

cpe:2.3:a:avaya:aura_communication_manager:6.3.7.1
Avaya » Aura Communication Manager » Version: 6.3.8.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.8.0
Avaya » Aura Communication Manager » Version: 6.3.9.0

cpe:2.3:a:avaya:aura_communication_manager:6.3.9.0
Avaya » Aura Communication Manager » Version: 7.0

cpe:2.3:a:avaya:aura_communication_manager:7.0
Avaya » Aura Communication Manager Messagint » Version: 7.0

cpe:2.3:a:avaya:aura_communication_manager_messagint:7.0
Avaya » Aura Conferencing » Version: 7.0

cpe:2.3:a:avaya:aura_conferencing:7.0
Avaya » Aura Conferencing » Version: 7.2

cpe:2.3:a:avaya:aura_conferencing:7.2
Avaya » Aura Conferencing » Version: 8.0

cpe:2.3:a:avaya:aura_conferencing:8.0
Avaya » Aura Experience Portal » Version: 6.0

cpe:2.3:a:avaya:aura_experience_portal:6.0
Avaya » Aura Experience Portal » Version: 7.1

cpe:2.3:a:avaya:aura_experience_portal:7.1
Avaya » Aura Messaging » Version: 6.3

cpe:2.3:a:avaya:aura_messaging:6.3
Avaya » Aura Messaging » Version: 6.3.3

cpe:2.3:a:avaya:aura_messaging:6.3.3
Avaya » Aura Session Manager » Version: 6.3

cpe:2.3:a:avaya:aura_session_manager:6.3
Avaya » Aura Session Manager » Version: 6.3.18

cpe:2.3:a:avaya:aura_session_manager:6.3.18
Avaya » Aura Session Manager » Version: 7.0

cpe:2.3:a:avaya:aura_session_manager:7.0
Avaya » Aura Session Manager » Version: 7.0.1

cpe:2.3:a:avaya:aura_session_manager:7.0.1
Avaya » Aura System Manager » Version: 6.3

cpe:2.3:a:avaya:aura_system_manager:6.3
Avaya » Aura System Manager » Version: 6.3.18

cpe:2.3:a:avaya:aura_system_manager:6.3.18
Avaya » Aura System Manager » Version: 7.0

cpe:2.3:a:avaya:aura_system_manager:7.0
Avaya » Aura System Manager » Version: 7.0.1.3

cpe:2.3:a:avaya:aura_system_manager:7.0.1.3
Avaya » Aura Utility Services » Version: 6.3

cpe:2.3:a:avaya:aura_utility_services:6.3
Avaya » Aura Utility Services » Version: 6.3.14

cpe:2.3:a:avaya:aura_utility_services:6.3.14
Avaya » Aura Utility Services » Version: 7.0

cpe:2.3:a:avaya:aura_utility_services:7.0
Avaya » Aura Utility Services » Version: 7.0.1.2

cpe:2.3:a:avaya:aura_utility_services:7.0.1.2
Avaya » Breeze Platform » Version: 3.0

cpe:2.3:a:avaya:breeze_platform:3.0
Avaya » Breeze Platform » Version: 3.2

cpe:2.3:a:avaya:breeze_platform:3.2
Avaya » Call Management System » Version: 17.0

cpe:2.3:a:avaya:call_management_system:17.0
Avaya » Call Management System » Version: 18.0.0.1

cpe:2.3:a:avaya:call_management_system:18.0.0.1
Avaya » Call Management System » Version: 18.0.0.2

cpe:2.3:a:avaya:call_management_system:18.0.0.2
Avaya » Ip Office » Version: 10.0

cpe:2.3:a:avaya:ip_office:10.0
Avaya » Ip Office » Version: 8.1

cpe:2.3:a:avaya:ip_office:8.1
Avaya » Ip Office » Version: 9.1

cpe:2.3:a:avaya:ip_office:9.1
Avaya » Iq » Version: 5.2.x

cpe:2.3:a:avaya:iq:5.2.x
Avaya » Meeting Exchange » Version: 6.2

cpe:2.3:a:avaya:meeting_exchange:6.2
Avaya » Message Networking » Version: 5.2

cpe:2.3:a:avaya:message_networking:5.2
Avaya » Message Networking » Version: 6.3

cpe:2.3:a:avaya:message_networking:6.3
Avaya » One-X Client Enablement Services » Version: 6.2

cpe:2.3:a:avaya:one-x_client_enablement_services:6.2
Avaya » Proactive Contact » Version: 5.0

cpe:2.3:a:avaya:proactive_contact:5.0
Avaya » Proactive Contact » Version: 5.1.2

cpe:2.3:a:avaya:proactive_contact:5.1.2
Mozilla » Nss » Version: N/A

cpe:2.3:a:mozilla:nss:-
Mozilla » Nss » Version: 3.1

cpe:2.3:a:mozilla:nss:3.1
Mozilla » Nss » Version: 3.1.1

cpe:2.3:a:mozilla:nss:3.1.1
Mozilla » Nss » Version: 3.10

cpe:2.3:a:mozilla:nss:3.10
Mozilla » Nss » Version: 3.10.1

cpe:2.3:a:mozilla:nss:3.10.1
Mozilla » Nss » Version: 3.10.2

cpe:2.3:a:mozilla:nss:3.10.2
Mozilla » Nss » Version: 3.11

cpe:2.3:a:mozilla:nss:3.11
Mozilla » Nss » Version: 3.11.1

cpe:2.3:a:mozilla:nss:3.11.1
Mozilla » Nss » Version: 3.11.10

cpe:2.3:a:mozilla:nss:3.11.10
Mozilla » Nss » Version: 3.11.2

cpe:2.3:a:mozilla:nss:3.11.2
Mozilla » Nss » Version: 3.11.3

cpe:2.3:a:mozilla:nss:3.11.3
Mozilla » Nss » Version: 3.11.4

cpe:2.3:a:mozilla:nss:3.11.4
Mozilla » Nss » Version: 3.11.5

cpe:2.3:a:mozilla:nss:3.11.5
Mozilla » Nss » Version: 3.11.6

cpe:2.3:a:mozilla:nss:3.11.6
Mozilla » Nss » Version: 3.11.7

cpe:2.3:a:mozilla:nss:3.11.7
Mozilla » Nss » Version: 3.11.8

cpe:2.3:a:mozilla:nss:3.11.8
Mozilla » Nss » Version: 3.11.9

cpe:2.3:a:mozilla:nss:3.11.9
Mozilla » Nss » Version: 3.12

cpe:2.3:a:mozilla:nss:3.12
Mozilla » Nss » Version: 3.12.1

cpe:2.3:a:mozilla:nss:3.12.1
Mozilla » Nss » Version: 3.12.2

cpe:2.3:a:mozilla:nss:3.12.2
Mozilla » Nss » Version: 3.12.3

cpe:2.3:a:mozilla:nss:3.12.3
Mozilla » Nss » Version: 3.12.3.1

cpe:2.3:a:mozilla:nss:3.12.3.1
Mozilla » Nss » Version: 3.12.3.2

cpe:2.3:a:mozilla:nss:3.12.3.2
Mozilla » Nss » Version: 3.12.4

cpe:2.3:a:mozilla:nss:3.12.4
Mozilla » Nss » Version: 3.12.5

cpe:2.3:a:mozilla:nss:3.12.5
Mozilla » Nss » Version: 3.12.6

cpe:2.3:a:mozilla:nss:3.12.6
Mozilla » Nss » Version: 3.14

cpe:2.3:a:mozilla:nss:3.14
Mozilla » Nss » Version: 3.14.1

cpe:2.3:a:mozilla:nss:3.14.1
Mozilla » Nss » Version: 3.14.2

cpe:2.3:a:mozilla:nss:3.14.2
Mozilla » Nss » Version: 3.14.3

cpe:2.3:a:mozilla:nss:3.14.3
Mozilla » Nss » Version: 3.14.4

cpe:2.3:a:mozilla:nss:3.14.4
Mozilla » Nss » Version: 3.14.5

cpe:2.3:a:mozilla:nss:3.14.5
Mozilla » Nss » Version: 3.15

cpe:2.3:a:mozilla:nss:3.15
Mozilla » Nss » Version: 3.15.1

cpe:2.3:a:mozilla:nss:3.15.1
Mozilla » Nss » Version: 3.15.2

cpe:2.3:a:mozilla:nss:3.15.2
Mozilla » Nss » Version: 3.15.3

cpe:2.3:a:mozilla:nss:3.15.3
Mozilla » Nss » Version: 3.15.3.1

cpe:2.3:a:mozilla:nss:3.15.3.1
Mozilla » Nss » Version: 3.15.4

cpe:2.3:a:mozilla:nss:3.15.4
Mozilla » Nss » Version: 3.15.5

cpe:2.3:a:mozilla:nss:3.15.5
Mozilla » Nss » Version: 3.16

cpe:2.3:a:mozilla:nss:3.16
Mozilla » Nss » Version: 3.16.1

cpe:2.3:a:mozilla:nss:3.16.1
Mozilla » Nss » Version: 3.16.2

cpe:2.3:a:mozilla:nss:3.16.2
Mozilla » Nss » Version: 3.16.2.1

cpe:2.3:a:mozilla:nss:3.16.2.1
Mozilla » Nss » Version: 3.16.2.2

cpe:2.3:a:mozilla:nss:3.16.2.2
Mozilla » Nss » Version: 3.16.2.3

cpe:2.3:a:mozilla:nss:3.16.2.3
Mozilla » Nss » Version: 3.16.3

cpe:2.3:a:mozilla:nss:3.16.3
Mozilla » Nss » Version: 3.16.4

cpe:2.3:a:mozilla:nss:3.16.4
Mozilla » Nss » Version: 3.16.5

cpe:2.3:a:mozilla:nss:3.16.5
Mozilla » Nss » Version: 3.16.6

cpe:2.3:a:mozilla:nss:3.16.6
Mozilla » Nss » Version: 3.17

cpe:2.3:a:mozilla:nss:3.17
Mozilla » Nss » Version: 3.17.1

cpe:2.3:a:mozilla:nss:3.17.1
Mozilla » Nss » Version: 3.17.2

cpe:2.3:a:mozilla:nss:3.17.2
Mozilla » Nss » Version: 3.17.3

cpe:2.3:a:mozilla:nss:3.17.3
Mozilla » Nss » Version: 3.17.4

cpe:2.3:a:mozilla:nss:3.17.4
Mozilla » Nss » Version: 3.18

cpe:2.3:a:mozilla:nss:3.18
Mozilla » Nss » Version: 3.18.1

cpe:2.3:a:mozilla:nss:3.18.1
Mozilla » Nss » Version: 3.19

cpe:2.3:a:mozilla:nss:3.19
Mozilla » Nss » Version: 3.19.1

cpe:2.3:a:mozilla:nss:3.19.1
Mozilla » Nss » Version: 3.19.2

cpe:2.3:a:mozilla:nss:3.19.2
Mozilla » Nss » Version: 3.19.3

cpe:2.3:a:mozilla:nss:3.19.3
Mozilla » Nss » Version: 3.2

cpe:2.3:a:mozilla:nss:3.2
Mozilla » Nss » Version: 3.2.1

cpe:2.3:a:mozilla:nss:3.2.1
Mozilla » Nss » Version: 3.20

cpe:2.3:a:mozilla:nss:3.20
Mozilla » Nss » Version: 3.20.1

cpe:2.3:a:mozilla:nss:3.20.1
Mozilla » Nss » Version: 3.21

cpe:2.3:a:mozilla:nss:3.21
Mozilla » Nss » Version: 3.21.1

cpe:2.3:a:mozilla:nss:3.21.1
Mozilla » Nss » Version: 3.21.2

cpe:2.3:a:mozilla:nss:3.21.2
Mozilla » Nss » Version: 3.21.3

cpe:2.3:a:mozilla:nss:3.21.3
Mozilla » Nss » Version: 3.21.4

cpe:2.3:a:mozilla:nss:3.21.4
Mozilla » Nss » Version: 3.22

cpe:2.3:a:mozilla:nss:3.22
Mozilla » Nss » Version: 3.22.1

cpe:2.3:a:mozilla:nss:3.22.1
Mozilla » Nss » Version: 3.22.2

cpe:2.3:a:mozilla:nss:3.22.2
Mozilla » Nss » Version: 3.23

cpe:2.3:a:mozilla:nss:3.23
Mozilla » Nss » Version: 3.24

cpe:2.3:a:mozilla:nss:3.24
Mozilla » Nss » Version: 3.25

cpe:2.3:a:mozilla:nss:3.25
Mozilla » Nss » Version: 3.25.1

cpe:2.3:a:mozilla:nss:3.25.1
Mozilla » Nss » Version: 3.3

cpe:2.3:a:mozilla:nss:3.3
Mozilla » Nss » Version: 3.3.1

cpe:2.3:a:mozilla:nss:3.3.1
Mozilla » Nss » Version: 3.3.2

cpe:2.3:a:mozilla:nss:3.3.2
Mozilla » Nss » Version: 3.4

cpe:2.3:a:mozilla:nss:3.4
Mozilla » Nss » Version: 3.4.1

cpe:2.3:a:mozilla:nss:3.4.1
Mozilla » Nss » Version: 3.4.2

cpe:2.3:a:mozilla:nss:3.4.2
Mozilla » Nss » Version: 3.4.3

cpe:2.3:a:mozilla:nss:3.4.3
Mozilla » Nss » Version: 3.6

cpe:2.3:a:mozilla:nss:3.6
Mozilla » Nss » Version: 3.6.1

cpe:2.3:a:mozilla:nss:3.6.1
Mozilla » Nss » Version: 3.7

cpe:2.3:a:mozilla:nss:3.7
Mozilla » Nss » Version: 3.7.1

cpe:2.3:a:mozilla:nss:3.7.1
Mozilla » Nss » Version: 3.7.2

cpe:2.3:a:mozilla:nss:3.7.2
Mozilla » Nss » Version: 3.7.3

cpe:2.3:a:mozilla:nss:3.7.3
Mozilla » Nss » Version: 3.7.5

cpe:2.3:a:mozilla:nss:3.7.5
Mozilla » Nss » Version: 3.7.7

cpe:2.3:a:mozilla:nss:3.7.7
Mozilla » Nss » Version: 3.8

cpe:2.3:a:mozilla:nss:3.8
Mozilla » Nss » Version: 3.9

cpe:2.3:a:mozilla:nss:3.9
Mozilla » Nss » Version: 3.9.1

cpe:2.3:a:mozilla:nss:3.9.1
Mozilla » Nss » Version: 3.9.2

cpe:2.3:a:mozilla:nss:3.9.2
Mozilla » Nss » Version: 3.9.3

cpe:2.3:a:mozilla:nss:3.9.3
Mozilla » Nss » Version: 3.9.4

cpe:2.3:a:mozilla:nss:3.9.4
Mozilla » Nss » Version: 3.9.5

cpe:2.3:a:mozilla:nss:3.9.5
Avaya » Aura System Platform » Version: N/A

cpe:2.3:h:avaya:aura_system_platform:-
Avaya » Cs1000e/cs1000m Signaling Server » Version: N/A

cpe:2.3:h:avaya:cs1000e/cs1000m_signaling_server:-
Avaya » Cs1000e » Version: N/A

cpe:2.3:h:avaya:cs1000e:-
Avaya » Cs1000m » Version: N/A

cpe:2.3:h:avaya:cs1000m:-
Avaya » Session Border Controller For Enterprise » Version: N/A

cpe:2.3:h:avaya:session_border_controller_for_enterprise:-
Avaya » Aura System Platform Firmware » Version: 6.3

cpe:2.3:o:avaya:aura_system_platform_firmware:6.3
Avaya » Aura System Platform Firmware » Version: 6.4.0

cpe:2.3:o:avaya:aura_system_platform_firmware:6.4.0
Avaya » Cs1000e/cs1000m Signaling Server Firmware » Version: 7.0

cpe:2.3:o:avaya:cs1000e/cs1000m_signaling_server_firmware:7.0
Avaya » Cs1000e/cs1000m Signaling Server Firmware » Version: 7.6

cpe:2.3:o:avaya:cs1000e/cs1000m_signaling_server_firmware:7.6
Avaya » Cs1000e Firmware » Version: 7.0

cpe:2.3:o:avaya:cs1000e_firmware:7.0
Avaya » Cs1000e Firmware » Version: 7.6

cpe:2.3:o:avaya:cs1000e_firmware:7.6
Avaya » Cs1000m Firmware » Version: 7.0

cpe:2.3:o:avaya:cs1000m_firmware:7.0
Avaya » Cs1000m Firmware » Version: 7.6

cpe:2.3:o:avaya:cs1000m_firmware:7.6
Avaya » Session Border Controller For Enterprise Firmware » Version: 6.2

cpe:2.3:o:avaya:session_border_controller_for_enterprise_firmware:6.2
Avaya » Session Border Controller For Enterprise Firmware » Version: 6.3

cpe:2.3:o:avaya:session_border_controller_for_enterprise_firmware:6.3
Avaya » Session Border Controller For Enterprise Firmware » Version: 7.0

cpe:2.3:o:avaya:session_border_controller_for_enterprise_firmware:7.0
Avaya » Session Border Controller For Enterprise Firmware » Version: 7.1

cpe:2.3:o:avaya:session_border_controller_for_enterprise_firmware:7.1
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux » Version: 5.0

cpe:2.3:o:redhat:enterprise_linux:5.0
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Suse » Linux Enterprise Server » Version: 11

cpe:2.3:o:suse:linux_enterprise_server:11

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-5285

Products

Pricing

Contact Us