nss-util vulnerabilities (Red Hat)
54 vulnerabilities.
-
nss-utilRed Hat Memory corruption in NSS 9.8 Critical -
nss-utilRed Hat Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This... 4.3 Medium -
nss-utilRed Hat NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack... 6.5 Medium -
nss-utilRed Hat An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary... 8.8 High -
nss-utilRed Hat NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap... 9.8 Critical -
nss-utilRed Hat A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw... 7.5 High -
nss-utilRed Hat A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55.... 9.1 Critical -
nss-utilRed Hat When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;... 5.3 Medium -
nss-utilRed Hat During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time... 4.7 Medium -
nss-utilRed Hat When converting coordinates from projective to affine, the modular inversion was not performed in... 4.7 Medium -
nss-utilRed Hat During RSA key generation, bignum implementations used a variation of the Binary Extended... 4.4 Medium -
nss-utilRed Hat NSS has shown timing differences when performing DSA signatures, which was exploitable and could... 4.4 Medium -
nss-utilRed Hat After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,... 6.5 Medium -
nss-utilRed Hat In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing... 9.8 Critical -
nss-utilRed Hat Improper refcounting of soft token session objects could cause a use-after-free and crash (likely... 8.8 High -
nss-utilRed Hat In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... 7.5 High -
nss-utilRed Hat When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller... 8.8 High -
nss-utilRed Hat Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being... 7.5 High -
nss-utilRed Hat A vulnerability exists where it possible to force Network Security Services (NSS) to sign... 5.3 Medium -
nss-utilRed Hat When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible... 7.5 High -
nss-utilRed Hat In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can... 6.5 Medium -
nss-utilRed Hat A cached side channel attack during handshakes using RSA encryption could allow for the... 5.9 Medium -
nss-utilRed Hat Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA... 4.7 Medium -
nss-utilRed Hat Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29... 9.8 Critical -
nss-utilRed Hat It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to... 5.3 Medium -
nss-utilRed Hat Null pointer dereference vulnerability exists in K11_SignWithSymKey /... 7.5 High -
nss-utilRed Hat Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,... 8.8 High -
nss-utilRed Hat Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network... 7.3 High -
nss-utilRed Hat Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla... 8.8 High -
nss-utilRed Hat Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x... 8.8 High -
nss-utilRed Hat Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in... 7.5 High -
nss-utilRed Hat Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before... 9.8 Critical -
nss-utilRed Hat The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and... 7.5 High -
nss-utilRed Hat Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,... 4.3 Medium -
nss-utilRed Hat The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ... 7.5 High -
nss-utilRed Hat Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before... 7.5 High -
nss-utilRed Hat Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla... 10.0 High -
nss-utilRed Hat Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute... 10.0 High -
nss-utilRed Hat The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation... 4.3 Medium -
nss-utilRed Hat Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,... 4.3 Medium -
nss-utilRed Hat Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in... 9.3 High -
nss-utilRed Hat The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS... 5.8 Medium -
nss-utilRed Hat Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR)... 7.5 High -
nss-utilRed Hat The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS)... 5.8 Medium -
nss-utilRed Hat Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote... 7.5 High -
nss-utilRed Hat Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote... 7.5 High -
nss-utilRed Hat Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are... 5.0 Medium -
nss-utilRed Hat The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in... 5.0 Medium -
nss-utilRed Hat The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider... 4.3 Medium -
nss-utilRed Hat Red Hat Security Advisory: nss, nss-util, and nspr security, bug fix, and enhancement update No score - Show olderLoading…