nss-debugsource vulnerabilities (Red Hat)
21 vulnerabilities.
-
nss-debugsourceRed Hat Memory corruption in NSS 9.8 Critical -
nss-debugsourceRed Hat Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This... 4.3 Medium -
nss-debugsourceRed Hat NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack... 6.5 Medium -
nss-debugsourceRed Hat An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary... 8.8 High -
nss-debugsourceRed Hat NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap... 9.8 Critical -
nss-debugsourceRed Hat A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw... 7.5 High -
nss-debugsourceRed Hat A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55.... 9.1 Critical -
nss-debugsourceRed Hat When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;... 5.3 Medium -
nss-debugsourceRed Hat During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time... 4.7 Medium -
nss-debugsourceRed Hat When converting coordinates from projective to affine, the modular inversion was not performed in... 4.7 Medium -
nss-debugsourceRed Hat During RSA key generation, bignum implementations used a variation of the Binary Extended... 4.4 Medium -
nss-debugsourceRed Hat NSS has shown timing differences when performing DSA signatures, which was exploitable and could... 4.4 Medium -
nss-debugsourceRed Hat After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,... 6.5 Medium -
nss-debugsourceRed Hat In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing... 9.8 Critical -
nss-debugsourceRed Hat Improper refcounting of soft token session objects could cause a use-after-free and crash (likely... 8.8 High -
nss-debugsourceRed Hat In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... 7.5 High -
nss-debugsourceRed Hat When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller... 8.8 High -
nss-debugsourceRed Hat Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being... 7.5 High -
nss-debugsourceRed Hat A vulnerability exists where it possible to force Network Security Services (NSS) to sign... 5.3 Medium -
nss-debugsourceRed Hat When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible... 7.5 High -
nss-debugsourceRed Hat In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can... 6.5 Medium