nss vulnerabilities (Red Hat)
124 vulnerabilities.
-
nssRed Hat Memory corruption in NSS 9.8 Critical -
nssRed Hat Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This... 4.3 Medium -
nssRed Hat NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack... 6.5 Medium -
nssRed Hat An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary... 8.8 High -
nssRed Hat NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap... 9.8 Critical -
nssRed Hat A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw... 7.5 High -
nssRed Hat A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55.... 9.1 Critical -
nssRed Hat When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;... 5.3 Medium -
nssRed Hat During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time... 4.7 Medium -
nssRed Hat When converting coordinates from projective to affine, the modular inversion was not performed in... 4.7 Medium -
nssRed Hat During RSA key generation, bignum implementations used a variation of the Binary Extended... 4.4 Medium -
nssRed Hat NSS has shown timing differences when performing DSA signatures, which was exploitable and could... 4.4 Medium -
nssRed Hat After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,... 6.5 Medium -
nssRed Hat In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing... 9.8 Critical -
nssRed Hat Improper refcounting of soft token session objects could cause a use-after-free and crash (likely... 8.8 High -
nssRed Hat In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... 7.5 High -
nssRed Hat When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller... 8.8 High -
nssRed Hat Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being... 7.5 High -
nssRed Hat A vulnerability exists where it possible to force Network Security Services (NSS) to sign... 5.3 Medium -
nssRed Hat When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible... 7.5 High -
nssRed Hat In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can... 6.5 Medium -
nssRed Hat A cached side channel attack during handshakes using RSA encryption could allow for the... 5.9 Medium -
nssRed Hat When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random... 5.9 Medium -
nssRed Hat Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA... 4.7 Medium -
nssRed Hat During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This... 7.5 High -
nssRed Hat Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty... 7.5 High -
nssRed Hat Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29... 9.8 Critical -
nssRed Hat It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to... 5.3 Medium -
nssRed Hat Null pointer dereference vulnerability exists in K11_SignWithSymKey /... 7.5 High -
nssRed Hat Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,... 8.8 High -
nssRed Hat Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network... 7.3 High -
nssRed Hat Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla... 8.8 High -
nssRed Hat Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x... 8.8 High -
nssRed Hat Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2... 5.9 Medium -
nssRed Hat Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in... 7.5 High -
nssRed Hat Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before... 9.8 Critical -
nssRed Hat The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and... 7.5 High -
nssRed Hat Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0,... 4.3 Medium -
nssRed Hat Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,... 4.3 Medium -
nssRed Hat The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ... 7.5 High -
nssRed Hat Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before... 7.5 High -
nssRed Hat Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla... 10.0 High -
nssRed Hat Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute... 10.0 High -
nssRed Hat The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation... 4.3 Medium -
nssRed Hat Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,... 4.3 Medium -
nssRed Hat Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in... 9.3 High -
nssRed Hat The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS... 5.8 Medium -
nssRed Hat Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR)... 7.5 High -
nssRed Hat The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS)... 5.8 Medium -
nssRed Hat Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote... 7.5 High - Show olderLoading…