CVE-2022-3479 Null dereference in nss
An attacker can cause a denial of service by triggering a segmentation fault in the NSS library during client authentication when no user certificate is present.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-3479?
CVE-2022-3479 is a high-severity vulnerability in Mozilla Network Security Services, published on 14 Oct 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can lead us to a segmentation fault or crash.
Which versions are affected by CVE-2022-3479?
It affects 1 product.
Products include Mozilla Network Security Services.
How do I fix CVE-2022-3479?
Apply the vendor's patch.
Is CVE-2022-3479 being exploited?
There is no known exploitation of CVE-2022-3479 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Network Security Services
Sources
Also known as DEBIAN-CVE-2022-3479, GHSA-6275-5f4x-m3m3, OESA-2024-1211, OESA-2024-1212, OESA-2024-1213, OESA-2024-1214.