CVE:CVE-2018-18508
CNNVD:CNNVD-201902-594
NSS是美国Mozilla基金会的一个底层密码学库。该库支持多种加密算法，并且 Firefox 浏览器的TLS实现基于该库。
Mozilla NSS中存在代码问题漏洞。攻击者可以通过Mozilla NSS的CMS强制解除对空指针的引用，从而触发拒绝服务。
solution:Upgrade mozilla network_security_services to a higher version than 3.36.7,3.41.1,and avoid the version (,3.36.7),[3.41,3.41.1); Upgrade siemens ruggedcom_rox_mx5000_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1400_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1500_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1501_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1510_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1511_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1512_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx5000_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0)