CVE:CVE-2016-5285
CNNVD:CNNVD-201611-543
Mozilla Network Security Services（NSS）是美国Mozilla基金会的一个函数库（网络安全服务库）。该产品可跨平台提供SSL、S/MIME和其他Internet安全标准支持。
Mozilla NSS 3.26之前版本中存在代码问题漏洞。该漏洞源于K11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime缺少空值检查。攻击者可利用该漏洞造成拒绝服务（服务器崩溃）。
solution:Upgrade mozilla nss to a higher version than 3.26,and avoid the version (,3.26); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade redhat enterprise_linux to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade suse linux_enterprise_server to a higher version than 11:sp2,and avoid the version 11:sp2; Upgrade avaya aura_application_enablement_services to a higher version than 6.3.3,7.0,and avoid the version [6.1,6.3.3],7.0; Upgrade avaya aura_application_server_5300 to a higher version than 3.0,3.0:sp1,3.0:sp10,3.0:sp10.1,3.0:sp11,3.0:sp11.1,3.0:sp12,3.0:sp12.1,3.0:sp12.2,3.0:sp12.3,3.0:sp12.5,3.0:sp3,3.0:sp5,3.0:sp7,and avoid the version 3.0,3.0:sp1,3.0:sp10,3.0:sp10.1,3.0:sp11,3.0:sp11.1,3.0:sp12,3.0:sp12.1,3.0:sp12.2,3.0:sp12.3,3.0:sp12.5,3.0:sp3,3.0:sp5,3.0:sp7; Upgrade avaya aura_communication_manager to a higher version than 6.3.117.0,7.0,7.0:sp,7.0:sp3,and avoid the version [6.0,6.3.117.0],7.0,7.0:sp,7.0:sp3; Upgrade avaya aura_communication_manager_messagint to a higher version than 7.0,7.0:sp1,and avoid the version 7.0,7.0:sp1; Upgrade avaya breeze_platform to a higher version than 3.2,and avoid the version [3.0,3.2]; Upgrade avaya call_management_system to a higher version than 18.0.0.2,17.0,17.0:r3,17.0:r4,17.0:r5,17.0:r6,and avoid the version [18.0.0.1,18.0.0.2],17.0,17.0:r3,17.0:r4,17.0:r5,17.0:r6; Upgrade avaya iq to a higher version than 5.2.x,and avoid the version 5.2.x; Upgrade avaya cs1000e_firmware to a higher version than 7.6,and avoid the version [7.0,7.6]; Upgrade avaya cs1000m_firmware to a higher version than 7.6,and avoid the version [7.0,7.6]; Upgrade avaya cs1000e/cs1000m_signaling_server_firmware to a higher version than 7.6,and avoid the version [7.0,7.6]; Upgrade avaya aura_conferencing to a higher version than 7.0,7.2,8.0,8.0:sp2,8.0:sp4,8.0:sp5,8.0:sp7,8.0:sp8,8.0:sp9,and avoid the version 7.0,7.2,8.0,8.0:sp2,8.0:sp4,8.0:sp5,8.0:sp7,8.0:sp8,8.0:sp9; Upgrade avaya aura_experience_portal to a higher version than 7.1,and avoid the version [6.0,7.1]; Upgrade avaya ip_office to a higher version than 8.1,9.1,9.1:sp1,9.1:sp10,9.1:sp11,9.1:sp12,9.1:sp3,9.1:sp4,9.1:sp5,9.1:sp6,9.1:sp7,9.1:sp8,9.1:sp9,10.0,10.0:sp1,10.0:sp2,10.0:sp3,10.0:sp4,10.0:sp5,10.0:sp6,10.0:sp7,and avoid the version 8.1,9.1,9.1:sp1,9.1:sp10,9.1:sp11,9.1:sp12,9.1:sp3,9.1:sp4,9.1:sp5,9.1:sp6,9.1:sp7,9.1:sp8,9.1:sp9,10.0,10.0:sp1,10.0:sp2,10.0:sp3,10.0:sp4,10.0:sp5,10.0:sp6,10.0:sp7; Upgrade avaya aura_messaging to a higher version than 6.3,6.3.3,6.3.3:sp4,6.3.3:sp5,6.3.3:sp6,and avoid the version 6.3,6.3.3,6.3.3:sp4,6.3.3:sp5,6.3.3:sp6; Upgrade avaya aura_session_manager to a higher version than 6.3.18,7.0,7.0:sp1,7.0:sp2,7.0.1,7.0.1:sp1,7.0.1:sp2,and avoid the version [6.3,6.3.18],7.0,7.0:sp1,7.0:sp2,7.0.1,7.0.1:sp1,7.0.1:sp2; Upgrade avaya aura_system_manager to a higher version than 6.3.18,7.0.1.3,and avoid the version [6.3,6.3.18],[7.0,7.0.1.3]; Upgrade avaya aura_utility_services to a higher version than 6.3.14,7.0.1.2,and avoid the version [6.3,6.3.14],[7.0,7.0.1.2]; Upgrade avaya meeting_exchange to a higher version than 6.2,6.2:sp3,and avoid the version 6.2,6.2:sp3; Upgrade avaya message_networking to a higher version than 6.3,and avoid the version [5.2,6.3]; Upgrade avaya one-x_client_enablement_services to a higher version than 6.2,6.2:sp1,6.2:sp2,6.2:sp5,and avoid the version 6.2,6.2:sp1,6.2:sp2,6.2:sp5; Upgrade avaya proactive_contact to a higher version than 5.1.2,and avoid the version [5.0,5.1.2]; Upgrade avaya session_border_controller_for_enterprise_firmware to a higher version than 6.3,7.1,and avoid the version [6.2,6.3],[7.0,7.1]; Upgrade avaya aura_system_platform_firmware to a higher version than 6.4.0,and avoid the version [6.3,6.4.0]