[{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5461","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1101","RHSA-2017:1100","RHSA-2017:1103","RHSA-2017:1102"],"bugzilla":"1440080","bugzilla_description":"CVE-2017-5461 nss: Write beyond bounds caused by bugs in Base64 de/encoding in nssb64d.c and nssb64e.c (MFSA 2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.21.4-1.el5_11","nss-util-0:3.16.1-5.el6_5","nss-util-0:3.13.1-11.el6_2","nss-util-0:3.21.4-1.el6_7","nss-0:3.28.4-1.el6_9","nss-util-0:3.19.1-4.el6_6","nss-util-0:3.21.4-1.el7_2","nss-util-0:3.14.3-9.el6_4","nss-0:3.14.3-11.el5_9","nss-0:3.28.4-1.0.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-1950","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0495","RHSA-2016:0370","RHSA-2016:0371"],"bugzilla":"1310509","bugzilla_description":"CVE-2016-1950 nss: Heap buffer overflow vulnerability in ASN1 certificate parsing (MFSA 2016-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.19.1-3.el6_6","nss-util-0:3.19.1-5.el7_1","nss-util-0:3.14.3-8.el6_4","nss-util-0:3.19.1-9.el7_2","nss-util-0:3.16.1-4.el6_5","nss-0:3.19.1-4.el5_11","nss-util-0:3.19.1-5.el6_7","nss-util-0:3.13.1-10.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1950.json"},{"CVE":"CVE-2015-7181","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269345","bugzilla_description":"CVE-2015-7181 nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7181.json"},{"CVE":"CVE-2015-7182","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269351","bugzilla_description":"CVE-2015-7182 nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7182.json"}]