CVE-2015-7183

28

FAUCET Score

CVE-2015-7183 describes an integer overflow vulnerability in the Netscape Portable Runtime (NSPR) component of Mozilla Network Security Services (NSS), affecting Firefox and other products. This flaw, rated with a CVSS score of 7.5, allows remote attackers to achieve arbitrary code execution or cause a denial of service due to memory corruption. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 41.0.2CPE matchmatch criteria	cpe:2.3:a:mozilla:firefox::::::::
		<= 3.19.2.0CPE matchmatch criteria	cpe:2.3:a:mozilla:network_security_services::::::::
		3.20.0CPE matchmatch criteria	cpe:2.3:a:mozilla:network_security_services:3.20.0:::::::*
		38.0CPE matchmatch criteria	cpe:2.3:a:mozilla:firefox:38.0:::::::*
		38.0.1CPE matchmatch criteria	cpe:2.3:a:mozilla:firefox:38.0.1:::::::*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

6.4

CvssVersion

2.0

Exploit Intelligence

EPSS Score

6.79%

Probability of exploitation in next 30 days

EPSS Percentile

93.3%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0679 is in the 89th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (22)

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: nss-util-0:3.19.1-4.ael7b_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: nspr-0:4.10.8-2.el5_11

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: nss-0:3.19.1-2.el5_11

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: nspr-0:4.10.8-2.el6_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: nss-0:3.19.1-5.el6_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: nss-util-0:3.19.1-2.el6_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.2 Advanced Update SupportFixed in: nspr-0:4.8.9-6.el6_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.2 Advanced Update SupportFixed in: nss-0:3.13.1-12.el6_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.2 Advanced Update SupportFixed in: nss-util-0:3.13.1-9.el6_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: nspr-0:4.9.5-5.el6_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: nss-0:3.14.3-9.el6_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: nss-util-0:3.14.3-7.el6_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.5 Extended Update SupportFixed in: nspr-0:4.10.6-2.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.5 Extended Update SupportFixed in: nss-0:3.16.1-9.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.5 Extended Update SupportFixed in: nss-util-0:3.16.1-3.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.6 Extended Update SupportFixed in: nspr-0:4.10.8-2.el6_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.6 Extended Update SupportFixed in: nss-0:3.19.1-4.el6_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.6 Extended Update SupportFixed in: nss-util-0:3.19.1-2.el6_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: nspr-0:4.10.8-2.ael7b_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: nss-0:3.19.1-7.ael7b_1.2

mozillavendor investigatingvia nvd_reference

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 4Fixed in: nspr

Vendor Advisories (1)

redhatCVE-2015-7183Critical

nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)

References

lists.opensuse.org / opensuse-security-announce/2015-11/msg00013.html

lists.opensuse.org / opensuse-security-announce/2015-11/msg00015.html

lists.opensuse.org / opensuse-security-announce/2015-11/msg00020.html

lists.opensuse.org / opensuse-security-announce/2015-11/msg00021.html

lists.opensuse.org / opensuse-security-announce/2015-11/msg00025.html

lists.opensuse.org / opensuse-updates/2015-12/msg00037.html

lists.opensuse.org / opensuse-updates/2015-12/msg00049.html

packetstormsecurity.com / files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html

rhn.redhat.com / errata/RHSA-2015-1980.html

rhn.redhat.com / errata/RHSA-2015-1981.html

bto.bluecoat.com / security-advisory/sa119

bugzilla.mozilla.org / show_bug.cgi

developer.mozilla.org / en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes

Vendor Advisory

developer.mozilla.org / en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes

Vendor Advisory

developer.mozilla.org / en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes

Vendor Advisory

security.gentoo.org / glsa/201512-10

security.gentoo.org / glsa/201605-06

debian.org / security/2015/dsa-3393

debian.org / security/2015/dsa-3406

mozilla.org / security/announce/2015/mfsa2015-133.html

Vendor Advisory

oracle.com / technetwork/security-advisory/cpuapr2016v3-2985753.html

oracle.com / technetwork/security-advisory/cpujul2016-2881720.html

oracle.com / technetwork/security-advisory/cpuoct2017-3236626.html

oracle.com / technetwork/topics/security/bulletinapr2016-2952098.html

oracle.com / technetwork/topics/security/cpujan2016-2367955.html

oracle.com / technetwork/topics/security/linuxbulletinoct2015-2719645.html

oracle.com / technetwork/topics/security/ovmbulletinjul2016-3090546.html

securityfocus.com / bid/77415

securityfocus.com / bid/91787

securitytracker.com / id/1034069

slackware.com / security/viewer.php

ubuntu.com / usn/USN-2785-1

ubuntu.com / usn/USN-2790-1

ubuntu.com / usn/USN-2819-1