[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fN8T8Dy6bTCODMS7CJgF4jMlRlmW_n_IahurJAlaeldc":3,"g5a-risk:CVE-2016-1938":254},{"success":4,"data":5,"meta":252},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":61,"references":62,"referencesCount":192,"weaknesses":193,"weaknessesCount":197,"isActivelyExploited":198,"cisaInfo":15,"otxData":15,"relatedBlogPosts":199,"seoMetadata":200,"configurations":225,"relatedVendorCves":250,"notableEvents":251},"CVE-2016-1938","What is CVE-2016-1938?","The s_mp_div function in lib\u002Ffreebl\u002Fmpi\u002Fmpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.","The s_mp_div function in lib\u002Ffreebl\u002Fmpi\u002Fmpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divi...","2016-01-31T18:59:05.107","2025-04-12T10:46:40.837",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",3.9,2.5,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,10,4.9,0.0316,[38,38,38,38,38,38,38],"Medium",[42,47,50,53,58],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"opensuse","leap","42.1","cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",{"vendor":43,"product":43,"version":48,"criteria":49,"vulnerable":4},"13.1","cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",{"vendor":43,"product":43,"version":51,"criteria":52,"vulnerable":4},"13.2","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"mozilla","nss","*","cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*",{"vendor":54,"product":59,"version":56,"criteria":60,"vulnerable":4},"firefox","cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",5,[63,68,71,74,78,83,87,91,95,99,103,106,109,112,115,119,123,126,129,133,136,139,143,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186,188,190],{"url":64,"source":65,"tags":66},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-02\u002Fmsg00001.html","Opensuse",[67],"Third Party Advisory",{"url":69,"source":65,"tags":70},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-02\u002Fmsg00002.html",[67],{"url":72,"source":65,"tags":73},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-02\u002Fmsg00010.html",[],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3688","Debian",[],{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.mozilla.org\u002Fsecurity\u002Fannounce\u002F2016\u002Fmfsa2016-07.html","Mozilla",[82],"Vendor Advisory",{"url":84,"source":85,"tags":86},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2016-2881720.html","Oracle",[67],{"url":88,"source":89,"tags":90},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F81955","Securityfocus",[],{"url":92,"source":89,"tags":93},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F91787",[67,94],"VDB Entry",{"url":96,"source":97,"tags":98},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1034825","Securitytracker",[],{"url":100,"source":101,"tags":102},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2880-1","Ubuntu",[],{"url":104,"source":101,"tags":105},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2880-2",[],{"url":107,"source":101,"tags":108},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2903-1",[],{"url":110,"source":101,"tags":111},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2903-2",[],{"url":113,"source":101,"tags":114},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2973-1",[],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fblog.fuzzing-project.org\u002F37-Mozilla-NSS-Wrong-calculation-results-in-mp_div-and-mp_exptmod.html","Fuzzing-project",[],{"url":120,"source":80,"tags":121},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=1190248",[122],"Issue Tracking",{"url":124,"source":80,"tags":125},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=1194947",[122],{"url":127,"source":80,"tags":128},"https:\u002F\u002Fdeveloper.mozilla.org\u002Fen-US\u002Fdocs\u002FMozilla\u002FProjects\u002FNSS\u002FNSS_3.21_release_notes",[82],{"url":130,"source":131,"tags":132},"https:\u002F\u002Fgithub.com\u002Fhannob\u002Fbignum-fuzz\u002Fblob\u002Fmaster\u002FCVE-2016-1938-nss-mp_div.c","GitHub",[],{"url":134,"source":131,"tags":135},"https:\u002F\u002Fgithub.com\u002Fhannob\u002Fbignum-fuzz\u002Fblob\u002Fmaster\u002FCVE-2016-1938-nss-mp_exptmod.c",[],{"url":137,"source":80,"tags":138},"https:\u002F\u002Fhg.mozilla.org\u002Fprojects\u002Fnss\u002Fdiff\u002Fa555bf0fc23a\u002Flib\u002Ffreebl\u002Fmpi\u002Fmpi.c",[],{"url":140,"source":141,"tags":142},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201605-06","Gentoo",[],{"url":144,"source":141,"tags":145},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201701-46",[],{"url":64,"source":65,"tags":147},[67],{"url":69,"source":65,"tags":149},[67],{"url":72,"source":65,"tags":151},[],{"url":75,"source":76,"tags":153},[],{"url":79,"source":80,"tags":155},[82],{"url":84,"source":85,"tags":157},[67],{"url":88,"source":89,"tags":159},[],{"url":92,"source":89,"tags":161},[67,94],{"url":96,"source":97,"tags":163},[],{"url":100,"source":101,"tags":165},[],{"url":104,"source":101,"tags":167},[],{"url":107,"source":101,"tags":169},[],{"url":110,"source":101,"tags":171},[],{"url":113,"source":101,"tags":173},[],{"url":116,"source":117,"tags":175},[],{"url":120,"source":80,"tags":177},[122],{"url":124,"source":80,"tags":179},[122],{"url":127,"source":80,"tags":181},[82],{"url":130,"source":131,"tags":183},[],{"url":134,"source":131,"tags":185},[],{"url":137,"source":80,"tags":187},[],{"url":140,"source":141,"tags":189},[],{"url":144,"source":141,"tags":191},[],46,[194],{"id":195,"name":195,"description":196},"Unknown","CWE-310",1,false,[],{"title":201,"metaDescription":202,"keywords":203,"canonicalUrl":204,"structuredData":205},"What is CVE-2016-1938? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-1938, a medium severity cyber security vulnerability from 2016. The s_mp_div function in lib\u002Ffreebl\u002Fmpi\u002Fmpi.c in Mozilla N...","CVE-2016-1938, CVE-2016-1938 vulnerability, CVE-2016-1938 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, opensuse security, mozilla security, leap vulnerability, opensuse vulnerability, nss vulnerability, firefox vulnerability","\u002Fwhat-is\u002Fcve-2016-1938",{"@context":206,"@type":207,"headline":201,"description":202,"datePublished":10,"dateModified":11,"author":208,"publisher":212,"about":216,"mainEntityOfPage":220,"articleSection":223,"keywords":224},"https:\u002F\u002Fschema.org","TechArticle",{"@type":209,"name":210,"url":211},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":209,"name":210,"url":211,"logo":213},{"@type":214,"url":215},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":217,"name":6,"description":218,"additionalType":219},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":221,"@id":222},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-1938","Cybersecurity","CVE-2016-1938, CVE-2016-1938 vulnerability, CVE-2016-1938 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[226,237],{"Operator":15,"Negate":15,"Nodes":227},[228],{"Operator":229,"Negate":15,"CPEMatch":230},"OR",[231,233,235],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":232,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4863BE36-D16A-4D75-90D9-FD76DB5B48B7",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":234,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A10BC294-9196-425F-9FB0-B1625465B47F",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":236,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"03117DF1-3BEC-4B8D-AD63-DBBDB2126081",{"Operator":238,"Negate":15,"Nodes":239},"AND",[240,245],{"Operator":229,"Negate":15,"CPEMatch":241},[242],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":243,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":244},"06ECACCD-8004-4774-8806-585879B7CB87","3.20.1",{"Operator":229,"Negate":15,"CPEMatch":246},[247],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":248,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":249},"11233031-7034-4B56-8D8A-FCBD100B26F3","43.0.4",[],[],{"lastModified":11,"cacheTime":253,"version":32},1792349651867,{"score":255,"band":256,"action":257,"scoredAt":258},25,"Low","Monitor","2026-10-17T07:55:31.913614+00:00"]