CVE-2019-11745: Buffer Overflow
A heap-based buffer overflow was found in the NSCEncryptUpdate() function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application (compiled with nss). While the attack complexity is high, the impact to confidentiality, integrity, and availability are high as well.
Other sources
A heap-based buffer overflow was found in the NSCEncryptUpdate() function. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application (compiled with nss)
— Red Hat
Mozilla Network Security Services (NSS), as used in Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write when encrypting with a block cipher. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to corrupt the heap and execute arbitrary code on the vulnerable system or cause a denial of service.
— IBM
When encrypting with a block cipher, if a call to NSCEncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2019-11745?
CVE-2019-11745 is classified as a critical severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2019-11745?
To resolve CVE-2019-11745, update to the patched versions of the affected software, including nss-softokn versions 0:3.44.0-6.el6_10 or later.
What systems are affected by CVE-2019-11745?
CVE-2019-11745 affects various products including Mozilla Firefox, Firefox ESR, Thunderbird, and certain versions of nss and nss-softokn.
What impact does CVE-2019-11745 have?
If exploited, CVE-2019-11745 allows remote attackers to execute arbitrary code with the privileges of the affected application user.
What is the cause of CVE-2019-11745?
CVE-2019-11745 is caused by a heap-based buffer overflow in the NSC_EncryptUpdate() function of Mozilla NSS.