CVE-2021-43527

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.

• Mozilla Nss

  APP
  Mozilla
  < 3.73

• Mozilla Nss Esr

  APP
  Mozilla
  < 3.68.1

• Netapp Cloud Backup

  APP
  Netapp
  all versions

• Netapp E Series Santricity Os Controller

  APP
  Netapp
  11.0 – 11.70.1

• Oracle Communications Cloud Native Core Binding Support Function

  APP
  Oracle
  1.11.0

• Oracle Communications Cloud Native Core Network Repository Function

  APP
  Oracle
  1.15.01.15.1

• Oracle Communications Cloud Native Core Network Slice Selection Function

  APP
  Oracle
  1.8.0

• Oracle Communications Policy Management

  APP
  Oracle
  12.6.0.0.0

• Starwindsoftware Starwind San \& Nas

  APP
  Starwindsoftware
  v8r13

• Starwindsoftware Starwind Virtual San

  APP
  Starwindsoftware
  v8r13