Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

UBUNTU-CVE-2015-2730 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceUBUNTU-CVE-2015-2730

UBUNTU-CVE-2015-2730

MEDIUM5.5

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptic

Published Jul 5, 2015

Modified 6 months ago

Fix available

Details

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

Affected Packages

firefox

Ubuntu 14.04 LTS

Fixed in:

39.0+build5-0ubuntu0.14.04.1

nss

Ubuntu 14.04 LTS

Fixed in:

2:3.19.2-0ubuntu0.14.04.1

thunderbird

Ubuntu 14.04 LTS

Fixed in:

1:31.8.0+build1-0ubuntu0.14.04.1

References

http://www.mozilla.org/security/announce/2015/mfsa2015-64.html

https://bugzilla.mozilla.org/show_bug.cgi?id=1125025

https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes

https://ubuntu.com/security/CVE-2015-2730

https://ubuntu.com/security/notices/USN-2656-1

https://ubuntu.com/security/notices/USN-2656-2

https://ubuntu.com/security/notices/USN-2672-1

https://ubuntu.com/security/notices/USN-2673-1

https://www.cve.org/CVERecord?id=CVE-2015-2730

https://www.mozilla.org/en-US/security/advisories/mfsa2015-64/

Upstream

Related

USN-2656-1 USN-2656-2 USN-2672-1 USN-2673-1

Ecosystems

Ubuntu 14.04 LTS

Timeline

PublishedJul 5, 2015

ModifiedSep 8, 2025