nspr-devel vulnerabilities (Red Hat)
92 vulnerabilities.
-
nspr-develRed Hat Memory corruption in NSS 9.8 Critical -
nspr-develRed Hat Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This... 4.3 Medium -
nspr-develRed Hat NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack... 6.5 Medium -
nspr-develRed Hat An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary... 8.8 High -
nspr-develRed Hat A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw... 7.5 High -
nspr-develRed Hat A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55.... 9.1 Critical -
nspr-develRed Hat When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;... 5.3 Medium -
nspr-develRed Hat During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time... 4.7 Medium -
nspr-develRed Hat When converting coordinates from projective to affine, the modular inversion was not performed in... 4.7 Medium -
nspr-develRed Hat During RSA key generation, bignum implementations used a variation of the Binary Extended... 4.4 Medium -
nspr-develRed Hat NSS has shown timing differences when performing DSA signatures, which was exploitable and could... 4.4 Medium -
nspr-develRed Hat After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,... 6.5 Medium -
nspr-develRed Hat In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing... 9.8 Critical -
nspr-develRed Hat Improper refcounting of soft token session objects could cause a use-after-free and crash (likely... 8.8 High -
nspr-develRed Hat In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... 7.5 High -
nspr-develRed Hat Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being... 7.5 High -
nspr-develRed Hat A vulnerability exists where it possible to force Network Security Services (NSS) to sign... 5.3 Medium -
nspr-develRed Hat When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible... 7.5 High -
nspr-develRed Hat In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can... 6.5 Medium -
nspr-develRed Hat A cached side channel attack during handshakes using RSA encryption could allow for the... 5.9 Medium -
nspr-develRed Hat Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA... 4.7 Medium -
nspr-develRed Hat Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network... 7.3 High -
nspr-develRed Hat Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla... 8.8 High -
nspr-develRed Hat Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in... 7.5 High -
nspr-develRed Hat Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before... 9.8 Critical -
nspr-develRed Hat The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and... 7.5 High -
nspr-develRed Hat The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ... 7.5 High -
nspr-develRed Hat Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla... 10.0 High -
nspr-develRed Hat Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute... 10.0 High -
nspr-develRed Hat The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation... 4.3 Medium -
nspr-develRed Hat Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,... 4.3 Medium -
nspr-develRed Hat Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in... 9.3 High -
nspr-develRed Hat The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS... 5.8 Medium -
nspr-develRed Hat Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR)... 7.5 High -
nspr-develRed Hat The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS)... 5.8 Medium -
nspr-develRed Hat Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote... 7.5 High -
nspr-develRed Hat Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote... 7.5 High -
nspr-develRed Hat Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are... 5.0 Medium -
nspr-develRed Hat The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in... 5.0 Medium -
nspr-develRed Hat The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider... 4.3 Medium -
nspr-develRed Hat Red Hat Security Advisory: nss, nss-util, and nspr security, bug fix, and enhancement update No score -
nspr-develRed Hat The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic... 3.4 Low -
nspr-develRed Hat The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13... 5.0 Medium -
nspr-develRed Hat Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox... 9.3 High -
nspr-develRed Hat Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3... 4.3 Medium -
nspr-develRed Hat The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla... 6.8 Medium -
nspr-develRed Hat Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3... 9.3 High -
nspr-develRed Hat Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3... 9.3 High -
nspr-develRed Hat The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9,... 9.3 High -
nspr-develRed Hat Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9,... 4.3 Medium - Show olderLoading…