CVE-2019-17007: Mozilla Network Security Services

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.

Affected products

• Mozilla Network Security Services: before 3.44 (fixed in 3.44)
• Siemens Ruggedcom Rox MX5000 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1400 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1500 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1501 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1510 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1511 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX1512 Firmware: before 2.14.0 (fixed in 2.14.0)
• Siemens Ruggedcom Rox RX5000 Firmware: before 2.14.0 (fixed in 2.14.0)

Published 2020-10-22. Last modified 2026-06-17.