Candidate: CVE-2015-5244
PublicDate: 2017-08-07 20:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5244
Description:
 The NSSCipherSuite option with ciphersuites enabled in mod_nss before
 1.0.12 allows remote attackers to bypass application restrictions.
Ubuntu-Description:
Notes:
 tyhicks> As of 2015-09-16, no fix is available.
Bugs:
 https://bugzilla.redhat.com/show_bug.cgi?id=1259216
Priority: medium
Discovered-by: Hubert Kario
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]

Patches_libapache2-mod-nss:
upstream_libapache2-mod-nss: released (1.0.12-1)
precise_libapache2-mod-nss: ignored (reached end-of-life)
precise/esm_libapache2-mod-nss: DNE (precise was deferred [2015-09-16])
trusty_libapache2-mod-nss: not-affected (vulnerability introduced in 1.0.11)
trusty/esm_libapache2-mod-nss: DNE (trusty was not-affected [vulnerability introduced in 1.0.11])
vivid_libapache2-mod-nss: ignored (reached end-of-life)
vivid/stable-phone-overlay_libapache2-mod-nss: DNE
vivid/ubuntu-core_libapache2-mod-nss: DNE
wily_libapache2-mod-nss: ignored (reached end-of-life)
xenial_libapache2-mod-nss: not-affected (1.0.12-2)
yakkety_libapache2-mod-nss: ignored (reached end-of-life)
zesty_libapache2-mod-nss: ignored (reached end-of-life)
artful_libapache2-mod-nss: ignored (reached end-of-life)
bionic_libapache2-mod-nss: not-affected (1.0.12-2)
cosmic_libapache2-mod-nss: not-affected (1.0.12-2)
devel_libapache2-mod-nss: not-affected (1.0.12-2)