CVE-2018-18508

In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.

• CWE-476

• https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdfThird Party Advisory
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notesRelease Notes, Vendor Advisory
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notesRelease Notes, Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04Third Party Advisory, US Government Resource
• https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdfThird Party Advisory
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notesRelease Notes, Vendor Advisory
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notesRelease Notes, Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04Third Party Advisory, US Government Resource

Published

Oct 22, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18502Mozilla developers and community members reported memory saf…
• CVE-2018-18503When JavaScript is used to create and manipulate an audio bu…
• CVE-2018-18504A crash and out-of-bounds read can occur when the buffer of …
• CVE-2018-18505An earlier fix for an Inter-process Communication (IPC) vuln…
• CVE-2018-18506When proxy auto-detection is enabled, if a web server serves…5.9
• CVE-2018-18507Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-18509A flaw during verification of certain S/MIME signatures caus…
• CVE-2018-1851IBM WebSphere Application Server Liberty OpenID Connect coul…7.3
• CVE-2018-18510The about:crashcontent and about:crashparent pages can be tr…
• CVE-2018-18511Cross-origin images can be read from a canvas element in vio…
• CVE-2018-18512A use-after-free vulnerability can occur while playing a sou…
• CVE-2018-18513A crash can occur when processing a crafted S/MIME message o…