CVE-2016-9574: Mozilla Network Security Services

Medium severity, CVSS 5.9. EPSS: 1.4% chance of exploitation in the next 30 days.

nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.

Affected products

• Mozilla Network Security Services: before 3.30 (fixed in 3.30)

Published 2018-07-19. Last modified 2026-06-17.