CVE-2018-18508: Mozilla Network Security Services

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.

Affected products

• Mozilla Network Security Services: before 3.36.7 (fixed in 3.36.7); from 3.41, before 3.41.1 (fixed in 3.41.1)
• Siemens Ruggedcom Rox MX5000 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1400 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1500 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1501 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1510 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1511 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1512 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX5000 Firmware: before 2.14.0 (fixed in 2.14.0)

Published 2020-10-22. Last modified 2026-06-17.