CVE-2017-7502

—

CVSS 3.0

7.5 high

EPSS

4%p91

Published

May 30, 2017 (May 30, 2017)

Modified

Jun 17, 2026

Description

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.

Vendors: mozilla
Products: network security services
Weakness: CWE-476
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news0 stories

No ingested article mentions this CVE yet.