Security Update for nspr Package
Summary
DSA-3406-1: nspr - security update. Affects nspr versions < 2:4.9.2-1+deb7u3. Fixed in 2:4.9.2-1+deb7u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nspr package is the NetScape Portable Runtime library, which provides a platform-independent API for system-level and low-level programming. It is used by various applications to perform network operations, threading, and memory management. This vulnerability affects the nspr package in Debian 7 (wheezy) and Debian 8 (jessie) distributions.
Vulnerability Detail
The vulnerability in the nspr package is due to incorrect memory allocation. An attacker can exploit this vulnerability to cause a denial of service or execute arbitrary code. The specific technical details of the vulnerability have not been disclosed.
How To Fix
Minimum fixed version
2:4.9.2-1+deb7u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade nsprTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
It is crucial to upgrade the nspr package to the fixed versions to mitigate the risk of this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for nspr →
FAQ
This vulnerability can lead to a denial of service or the execution of arbitrary code.
This vulnerability affects Debian 7 (wheezy) and Debian 8 (jessie) distributions.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability.
No specific exploits have been disclosed for this vulnerability at this time.
You can find more information about this vulnerability in the Debian Security Advisory DSA-3406-1 (https://storage.googleapis.com/debian-osv/dsa-osv/DSA-3406-1.json).
Related vulnerabilities
Recent vulnerabilities recorded for nspr.
