CVE-2016-1950
HIGH · CVSS 8.8EPSS 4.2%EU EUVD
Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.
Key facts
- CVSS score
- 8.8 (v3.0)
- Severity
- HIGH
- CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H- Weakness (CWE)
- CWE-119
- EPSS score
- 4.2% (91th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2016-3039)
- Published
- March 13, 2016
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2016-3039 in the EU Vulnerability Database. Last updated in EUVD on August 5, 2024.
View on the EU Vulnerability DatabaseAffected products
- apple / iphone os
- apple / mac os x
- apple / tvos
- apple / watchos
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / firefox
- mozilla / network security services
- mozilla / network security services
- mozilla / network security services
- mozilla / network security services
- opensuse / opensuse
- oracle / glassfish server
- oracle / iplanet web proxy server
- oracle / iplanet web server
- oracle / linux
- oracle / linux
- oracle / linux
- oracle / vm server
Certified products that may be affected
27 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Oracle Linux 7 NSS Cryptographic Module - Oracle Corporation - FIPS 140 4586 - historical
- Oracle Linux 7 Libreswan Cryptographic Module - Oracle Corporation - FIPS 140 4266 - historical
- Oracle Linux 7 OpenSSH Client Cryptographic Module - Oracle Corporation - FIPS 140 4206 - historical
- Oracle Linux 7 OpenSSH Server Cryptographic Module - Oracle Corporation - FIPS 140 4176 - historical
- Oracle Linux 7 Unbreakable Enterprise Kernel (UEK 6) Cryptographic Module - Oracle Corporation - FIPS 140 4169 - historical
See all 27 in the Security Certifications Explorer.
References
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html(Mailing List)
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html(Mailing List)
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html(Mailing List)
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html(Mailing List)
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html(Third Party Advisory)
- http://rhn.redhat.com/errata/RHSA-2016-0495.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.debian.org/security/2016/dsa-3688
- http://www.mozilla.org/security/announce/2016/mfsa2016-35.html(Vendor Advisory)
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html(Third Party Advisory)
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html(Third Party Advisory)
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html(Third Party Advisory)
- http://www.securityfocus.com/bid/84223
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2924-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bto.bluecoat.com/security-advisory/sa119
- https://bugzilla.mozilla.org/show_bug.cgi?id=1245528(Issue Tracking)
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notes(Release Notes)
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes(Release Notes)
- https://security.gentoo.org/glsa/201605-06
- https://support.apple.com/HT206166(Third Party Advisory)
- https://support.apple.com/HT206167(Third Party Advisory)
- https://support.apple.com/HT206168(Third Party Advisory)
- https://support.apple.com/HT206169(Third Party Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain