ZeroDay Findings
Sign inSign up

Findings

CVE-2015-7575

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exc

Published Jan 9, 2016 · updated Oct 15, 2026 · n/a n/a

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 9, 2016 · NIST NVD

    Detected

    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

  3. Oct 15, 2026 · OSV.dev

    Fix available

    gnutls28 fixed in 3.3.15-1; gnutls28 fixed in 3.3.15-1; gnutls28 fixed in 3.3.15-1; nss fixed in 2:3.21-1

  4. Oct 15, 2026 · OSV.dev

    Fix available

    gnutls28 fixed in 3.3.15-1

  5. Oct 15, 2026 · OSV.dev

    Fix available

    nss fixed in 2:3.21-1

  6. Oct 15, 2026 · OSV.dev

    Fix available

    openssl fixed in 1.0.1f-1

  7. Oct 15, 2026 · OSV.dev

    Updated

    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

Affected

  • Debian:12 gnutls280 → 3.3.15-1
  • Debian:12 nss0 → 2:3.21-1
  • Debian:12 openssl0 → 1.0.1f-1
  • Debian:13 gnutls280 → 3.3.15-1
  • Debian:13 nss0 → 2:3.21-1
  • Debian:13 openssl0 → 1.0.1f-1
  • Debian:14 gnutls280 → 3.3.15-1
  • Debian:14 nss0 → 2:3.21-1
  • Debian:14 openssl0 → 1.0.1f-1
  • cpe canonical/ubuntu linux14.04
  • cpe mozilla/firefoxversion unspecified
  • cpe mozilla/firefox38.0
  • cpe mozilla/firefox38.0.1
  • cpe mozilla/firefox38.0.5
  • cpe mozilla/firefox38.1.0
  • cpe mozilla/network security servicesversion unspecified
  • cpe opensuse/leap42.1
  • cpe opensuse/opensuse13.1
  • cpe opensuse/opensuse13.2
  • vendor n/a n/aversion unspecified

Sources

  • CIRCL Vulnerability LookupCVE-2015-7575

    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle at

    vulnerability.circl.lu
  • CVE.orgCVE-2015-7575

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-7575

    30-day exploitation probability 2.9%

    first.org
  • NIST NVDCVE-2015-7575

    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle at

    nvd.nist.gov
  • OSV.devDEBIAN-CVE-2015-7575
    osv.dev

References