description: Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
problem types: CWE-476
affected:
{
product: nss
vendor: NSS project
versions:
status: affected, version: since 3.24.0
}