nss vulnerabilities (Debian)
89 vulnerabilities.
-
nssDebian Incorrect boundary conditions, integer overflow in the Libraries component in NSS 9.8 Critical -
nssDebian Incorrect boundary conditions in the Libraries component in NSS 7.3 High -
nssDebian Incorrect boundary conditions in the Libraries component in NSS 7.5 High -
nssDebian Other issue in the Libraries component in NSS 5.3 Medium -
nssDebian Incorrect boundary conditions in the Libraries component in NSS 7.5 High -
nssDebian Integer overflow in the Libraries component in NSS 9.8 Critical -
nssDebian Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can... 6.5 Medium -
nssDebian Memory corruption in NSS 8.8 High -
nssDebian Memory corruption in NSS 9.8 Critical -
nssDebian An unchecked return value in TLS handshake code could have caused a potentially exploitable crash... 7.5 High -
nssDebian Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This... 4.3 Medium -
nssDebian NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack... 6.5 Medium -
nssDebian The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting... 6.5 Medium -
nssDebian The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To... 5.9 Medium -
nssDebian An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary... 8.8 High -
nssDebian A vulnerability found in nss. By this security vulnerability, nss client auth crash without a... 7.5 High -
nssDebian After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the... 6.5 Medium -
nssDebian nss - regression update No score -
nssDebian NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap... 9.8 Critical -
nssDebian A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw... 7.5 High -
nssDebian A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55.... 9.1 Critical -
nssDebian When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;... 5.3 Medium -
nssDebian During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time... 4.7 Medium -
nssDebian When converting coordinates from projective to affine, the modular inversion was not performed in... 4.7 Medium -
nssDebian During RSA key generation, bignum implementations used a variation of the Binary Extended... 4.4 Medium -
nssDebian NSS has shown timing differences when performing DSA signatures, which was exploitable and could... 4.4 Medium -
nssDebian After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,... 6.5 Medium -
nssDebian In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing... 9.8 Critical -
nssDebian In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... 7.5 High -
nssDebian When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller... 8.8 High -
nssDebian Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being... 7.5 High -
nssDebian A vulnerability exists where it possible to force Network Security Services (NSS) to sign... 5.3 Medium -
nssDebian When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible... 7.5 High -
nssDebian In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can... 6.5 Medium -
nssDebian A cached side channel attack during handshakes using RSA encryption could allow for the... 5.9 Medium -
nssDebian When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random... 5.9 Medium -
nssDebian Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network... 7.8 High -
nssDebian The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context... 7.8 High -
nssDebian Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network... 7.8 High -
nssDebian Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network... 7.8 High -
nssDebian During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This... 7.5 High -
nssDebian Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty... 7.5 High -
nssDebian nss before version 3.30 is vulnerable to a remote denial of service during the session handshake... 5.9 Medium -
nssDebian A flaw in DRBG number generation within the Network Security Services (NSS) library where the... 5.3 Medium -
nssDebian Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29... 9.8 Critical -
nssDebian It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to... 5.3 Medium -
nssDebian An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This... 5.9 Medium -
nssDebian Null pointer dereference vulnerability exists in K11_SignWithSymKey /... 7.5 High -
nssDebian nss - security update No score -
nssDebian Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,... 8.8 High - Show olderLoading…