nss vulnerabilities (Ubuntu)
57 vulnerabilities.
-
nssUbuntu nss update No score -
nssUbuntu Incorrect boundary conditions in the Libraries component in NSS 7.3 High -
nssUbuntu Integer overflow in the Libraries component in NSS 9.8 Critical -
nssUbuntu nss regression No score -
nssUbuntu Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This... 4.3 Medium -
nssUbuntu NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack... 6.5 Medium -
nssUbuntu The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting... 6.5 Medium -
nssUbuntu An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary... 8.8 High -
nssUbuntu Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an... 8.8 High -
nssUbuntu After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the... 6.5 Medium -
nssUbuntu NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap... 9.8 Critical -
nssUbuntu A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw... 7.5 High -
nssUbuntu A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55.... 9.1 Critical -
nssUbuntu When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;... 5.3 Medium -
nssUbuntu During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time... 4.7 Medium -
nssUbuntu When converting coordinates from projective to affine, the modular inversion was not performed in... 4.7 Medium -
nssUbuntu During RSA key generation, bignum implementations used a variation of the Binary Extended... 4.4 Medium -
nssUbuntu NSS has shown timing differences when performing DSA signatures, which was exploitable and could... 4.4 Medium -
nssUbuntu After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,... 6.5 Medium -
nssUbuntu In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing... 9.8 Critical -
nssUbuntu In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... 7.5 High -
nssUbuntu When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller... 8.8 High -
nssUbuntu Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being... 7.5 High -
nssUbuntu A vulnerability exists where it possible to force Network Security Services (NSS) to sign... 5.3 Medium -
nssUbuntu When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible... 7.5 High -
nssUbuntu In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can... 6.5 Medium -
nssUbuntu A cached side channel attack during handshakes using RSA encryption could allow for the... 5.9 Medium -
nssUbuntu When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random... 5.9 Medium -
nssUbuntu Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA... 4.7 Medium -
nssUbuntu Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network... 7.8 High -
nssUbuntu The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context... 7.8 High -
nssUbuntu Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network... 7.8 High -
nssUbuntu Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network... 7.8 High -
nssUbuntu During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This... 7.5 High -
nssUbuntu Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty... 7.5 High -
nssUbuntu A flaw in DRBG number generation within the Network Security Services (NSS) library where the... 5.3 Medium -
nssUbuntu Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29... 9.8 Critical -
nssUbuntu It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to... 5.3 Medium -
nssUbuntu An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This... 5.9 Medium -
nssUbuntu Null pointer dereference vulnerability exists in K11_SignWithSymKey /... 7.5 High -
nssUbuntu The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... 7.5 High -
nssUbuntu Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,... 8.8 High -
nssUbuntu Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network... 7.3 High -
nssUbuntu Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x... 8.8 High -
nssUbuntu The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3... 6.5 Medium -
nssUbuntu Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2... 5.9 Medium -
nssUbuntu Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before... 9.8 Critical -
nssUbuntu The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and... 7.5 High -
nssUbuntu Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0,... 4.3 Medium -
nssUbuntu Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,... 4.3 Medium - Show olderLoading…