Every CVE Search/ Get API key

CVE-2018-12404

A cached side channel attack during handshakes using RSA encryption could allow for the...

5.9 MediumFix available

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

44.2%Up 42.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.9

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Record
CVE-2018-12404
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Record
CVE-2018-12404
Updated
2026-11-02
EUVDEUVD-2018-4378 No score

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Record
EUVD-2018-4378
Updated
2026-11-03
GitHub AdvisoriesGHSA-54r4-cg3v-pxw7 5.9

A cached side channel attack during handshakes using RSA encryption could allow for the...

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Record
GHSA-54r4-cg3v-pxw7
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALPINE-CVE-2018-12404 5.9

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Record
ALPINE-CVE-2018-12404
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVBELL-CVE-2018-12404 5.9

CVE-2018-12404 does not affect BellSoft software

Record
BELL-CVE-2018-12404
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 13 moreShow less
OSV 5.9

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Record
CVE-2018-12404
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-12404 5.9

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Record
DEBIAN-CVE-2018-12404
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2019:2237 7.5

Red Hat Security Advisory: nss, nss-softokn, nss-util, and nspr security, bug fix, and enhancement update

Record
RHSA-2019:2237
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-12404 5.9

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Record
UBUNTU-CVE-2018-12404
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2018-0482 No score

Updated nss packages fix security vulnerability

Cache side-channel variant of the Bleichenbacher attack.(CVE-2018-12404)

Record
MGASA-2018-0482
Updated
2026-11-02
OSVopenSUSE-SU-2019:0183-1 No score

Security update for mozilla-nss

This update for mozilla-nss fixes the following issues:

Security issues fixed:

  • CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack (bsc#1119069).

Non-security issue fixed:

  • Update to mozilla-nss 3.41.1

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:0183-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1758-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox, mozilla-nss fixes the following issues:

Security issues fixed:

  • CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (bsc#1122983).
  • CVE-2018-18501: Fixed multiple memory safety bugs (bsc#1122983).
  • CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (bsc#1122983).
  • CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack (bsc#1119069).

Non-security issue fixed:

  • Update to MozillaFirefox ESR 60.5.0
  • Update to mozilla-nss 3.41.1

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1758-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11058-1 No score

libfreebl3-3.69.1-1.2 on GA media

These are all security issues fixed in the libfreebl3-3.69.1-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11058-1
Updated
2026-11-02
OSVSUSE-SU-2018:4235-1 No score

Security update for MozillaFirefox, mozilla-nspr and mozilla-nss

This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:

Issues fixed in MozillaFirefox:

  • Update to Firefox ESR 60.4 (bsc#1119105)
  • CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
  • CVE-2018-18492: Fixed a use-after-free with select element
  • CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia
  • CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
  • CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images
  • CVE-2018-12405: Fixed a few memory safety bugs

Issues fixed in mozilla-nss:

  • Update to NSS 3.40.1 (bsc#1119105)
  • CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)
  • CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)
  • CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)
  • Fixed a decryption failure during FFDHE key exchange
  • Various security fixes in the ASN.1 code

Issues fixed in mozilla-nspr:

  • Update mozilla-nspr to 4.20 (bsc#1119105)
Record
SUSE-SU-2018:4235-1
Updated
2026-11-02
OSVSUSE-SU-2018:4236-1 No score

Security update for MozillaFirefox, mozilla-nspr and mozilla-nss

This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:

Issues fixed in MozillaFirefox:

  • Update to Firefox ESR 60.4 (bsc#1119105)
  • CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
  • CVE-2018-18492: Fixed a use-after-free with select element
  • CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia
  • CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
  • CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images
  • CVE-2018-12405: Fixed a few memory safety bugs

Issues fixed in mozilla-nss:

  • Update to NSS 3.40.1 (bsc#1119105)
  • CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)
  • CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)
  • CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)
  • Fixed a decryption failure during FFDHE key exchange
  • Various security fixes in the ASN.1 code

Issues fixed in mozilla-nspr:

  • Update mozilla-nspr to 4.20 (bsc#1119105)
Record
SUSE-SU-2018:4236-1
Updated
2026-11-02
OSVSUSE-SU-2018:4236-2 No score

Security update for MozillaFirefox, mozilla-nspr and mozilla-nss

This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:

Issues fixed in MozillaFirefox:

  • Update to Firefox ESR 60.4 (bsc#1119105)
  • CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
  • CVE-2018-18492: Fixed a use-after-free with select element
  • CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia
  • CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
  • CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images
  • CVE-2018-12405: Fixed a few memory safety bugs

Issues fixed in mozilla-nss:

  • Update to NSS 3.40.1 (bsc#1119105)
  • CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)
  • CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)
  • CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)
  • Fixed a decryption failure during FFDHE key exchange
  • Various security fixes in the ASN.1 code

Issues fixed in mozilla-nspr:

  • Update mozilla-nspr to 4.20 (bsc#1119105)
Record
SUSE-SU-2018:4236-2
Updated
2026-11-02
OSVSUSE-SU-2019:0273-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox, mozilla-nss fixes the following issues:

Security issues fixed:

  • CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (bsc#1122983).
  • CVE-2018-18501: Fixed multiple memory safety bugs (bsc#1122983).
  • CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (bsc#1122983).
  • CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack (bsc#1119069).

Non-security issue fixed:

  • Update to MozillaFirefox ESR 60.5.0
  • Update to mozilla-nss 3.41.1
Record
SUSE-SU-2019:0273-1
Updated
2026-11-02
OSVUSN-3850-1 No score

nss vulnerabilities

Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation. A local attacker could possibly use this issue to perform a cache-timing attack and recover private ECDSA keys. (CVE-2018-0495)

It was discovered that NSS incorrectly handled certain v2-compatible ClientHello messages. A remote attacker could possibly use this issue to perform a replay attack. (CVE-2018-12384)

It was discovered that NSS incorrectly handled certain padding oracles. A remote attacker could possibly use this issue to perform a variant of the Bleichenbacher attack. (CVE-2018-12404)

Record
USN-3850-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nss
Alpine:v3.10
 before 3.41-r0
3.41-r0
nss
Alpine:v3.11
 before 3.41-r0
3.41-r0
nss
Alpine:v3.12
 before 3.41-r0
3.41-r0
nss
Alpine:v3.19
 before 3.41-r0
3.41-r0
nss
Alpine:v3.20
 before 3.41-r0
3.41-r0
nss
Alpine:v3.21
 before 3.41-r0
3.41-r0
nss
Alpine:v3.22
 before 3.41-r0
3.41-r0
nss
Alpine:v3.23
 before 3.41-r0
3.41-r0
nss
Alpine:v3.24
 before 3.41-r0
3.41-r0
nss
Alpine:v3.9
 before 3.41-r0
3.41-r0
Show 135 moreShow less
Affected packages
PackageAffectedFixed
nss
Debian:12
 before 2:3.41-1
2:3.41-1
nss
Debian:13
 before 2:3.41-1
2:3.41-1
nss
Debian:14
 before 2:3.41-1
2:3.41-1
nss
Debian:8
 before 2:3.26-1+debu8u4, plus listed versions
2:3.17.2-1.12:3.17.2-1.1+deb8u12:3.17.2-1.1+deb8u22:3.17.2-1.1+x322:3.17.4-1
Show 14 moreShow less
2:3.18-12:3.19-12:3.19.1-12:3.19.1-22:3.19.2-12:3.19.2-1+x32.12:3.20-12:3.20.1-12:3.21-12:3.21-1.12:3.23-12:3.23-22:3.25-12:3.26-1
2:3.26-1+debu8u4
nss
Debian:9
 before 2:3.26.2-1.1+deb9u2, plus listed versions
2:3.26.2-1.12:3.26.2-1.1+deb9u1
2:3.26.2-1.1+deb9u2
nss
Mageia:6
 before 3.36.6-1.mga6
3.36.6-1.mga6
rootcerts
Mageia:6
 before 20181108.00-1.mga6
20181108.00-1.mga6
nspr
Red Hat:enterprise_linux:7::client
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nspr-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nss
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-softokn
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-freebl
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-sysinit
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-tools
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-util
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nss-util-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nspr-devel
Red Hat:enterprise_linux:7::client
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nss-devel
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-pkcs11-devel
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-softokn-devel
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-freebl-devel
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-util-devel
Red Hat:enterprise_linux:7::client
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nspr
Red Hat:enterprise_linux:7::computenode
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nspr-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nss
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-softokn
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-freebl
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-sysinit
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-tools
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-util
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nss-util-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nspr-devel
Red Hat:enterprise_linux:7::computenode
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nss-devel
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-pkcs11-devel
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-softokn-devel
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-freebl-devel
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-util-devel
Red Hat:enterprise_linux:7::computenode
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nspr
Red Hat:enterprise_linux:7::server
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nspr-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nspr-devel
Red Hat:enterprise_linux:7::server
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nss
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-devel
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-softokn
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-devel
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-freebl
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-freebl-devel
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-sysinit
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-tools
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-util
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nss-util-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nss-util-devel
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nss-pkcs11-devel
Red Hat:enterprise_linux:7::server
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nspr
Red Hat:enterprise_linux:7::workstation
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nspr-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nspr-devel
Red Hat:enterprise_linux:7::workstation
 before 0:4.21.0-1.el7
0:4.21.0-1.el7
nss
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-softokn
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-freebl
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-softokn-freebl-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-5.el7
0:3.44.0-5.el7
nss-sysinit
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-tools
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
nss-util
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nss-util-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nss-util-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-3.el7
0:3.44.0-3.el7
nss-pkcs11-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.44.0-4.el7
0:3.44.0-4.el7
mozilla-nspr
SUSE:Linux Enterprise Module for Basesystem 15
 before 4.20-3.3.2
4.20-3.3.2
mozilla-nss
SUSE:Linux Enterprise Module for Basesystem 15
 before 3.40.1-3.7.2
3.40.1-3.7.2
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 60.4.0-3.21.1
60.4.0-3.21.1
MozillaFirefox
SUSE:OpenStack Cloud 7
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:OpenStack Cloud 7
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:OpenStack Cloud 7
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP3
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Desktop 12 SP3
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Desktop 12 SP3
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP4
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Desktop 12 SP4
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Desktop 12 SP4
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server 12-LTSS
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server 12-LTSS
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server 12-LTSS
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server 12 SP3
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server 12 SP3
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP4
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server 12 SP4
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server 12 SP4
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Enterprise Storage 4
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Enterprise Storage 4
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Enterprise Storage 4
 before 3.40.1-58.18.1
3.40.1-58.18.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 60.4.0esr-109.55.1
60.4.0esr-109.55.1
mozilla-nspr
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 4.20-19.6.1
4.20-19.6.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 3.40.1-58.18.1
3.40.1-58.18.1
mozilla-nss
SUSE:Linux Enterprise Module for Basesystem 15
 before 3.41.1-3.13.1
3.41.1-3.13.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 60.5.0-3.24.2
60.5.0-3.24.2
nss
Ubuntu:14.04:LTS
 before 2:3.28.4-0ubuntu0.14.04.4, plus listed versions
2:3.15.1-1ubuntu12:3.15.2-12:3.15.3-12:3.15.3.1-12:3.15.3.1-1.1
Show 21 moreShow less
2:3.15.3.1-1.1ubuntu12:3.15.4-1ubuntu32:3.15.4-1ubuntu42:3.15.4-1ubuntu52:3.15.4-1ubuntu62:3.15.4-1ubuntu72:3.15.4-1ubuntu7.12:3.17-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.22:3.17.4-0ubuntu0.14.04.12:3.19.2-0ubuntu0.14.04.12:3.19.2.1-0ubuntu0.14.04.12:3.19.2.1-0ubuntu0.14.04.22:3.21-0ubuntu0.14.04.12:3.21-0ubuntu0.14.04.22:3.23-0ubuntu0.14.04.12:3.26.2-0ubuntu0.14.04.32:3.28.4-0ubuntu0.14.04.12:3.28.4-0ubuntu0.14.04.22:3.28.4-0ubuntu0.14.04.3
2:3.28.4-0ubuntu0.14.04.4
nss
Ubuntu:16.04:LTS
 before 2:3.28.4-0ubuntu0.16.04.4, plus listed versions
2:3.19.2-1ubuntu12:3.19.2.1-0ubuntu12:3.21-1ubuntu22:3.21-1ubuntu32:3.21-1ubuntu4
Show 5 moreShow less
2:3.23-0ubuntu0.16.04.12:3.26.2-0ubuntu0.16.04.22:3.28.4-0ubuntu0.16.04.12:3.28.4-0ubuntu0.16.04.22:3.28.4-0ubuntu0.16.04.3
2:3.28.4-0ubuntu0.16.04.4
nss
Ubuntu:18.04:LTS
 before 2:3.35-2ubuntu2.1, plus listed versions
2:3.32-1ubuntu32:3.34-1ubuntu12:3.35-2ubuntu2
2:3.35-2ubuntu2.1
mozilla-nss
openSUSE:Leap 15.0
 before 3.41.1-lp150.2.16.1
3.41.1-lp150.2.16.1
MozillaFirefox
openSUSE:Leap 15.0
 before 60.8.0-lp150.3.62.1
60.8.0-lp150.3.62.1
mozilla-nss
openSUSE:Leap 15.0
 before 3.41.1-lp150.2.20.1
3.41.1-lp150.2.20.1
mozilla-nss
openSUSE:Tumbleweed
 before 3.69.1-1.2
3.69.1-1.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-12404 is a medium vulnerability (CVSS 5.9) in Mozilla Network Security Services (nss), published December 12, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 44.2%, the 98th percentile. Fixed in nss 3.41-r0.

References

Show 83 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open