mozilla-nss vulnerabilities (openSUSE)
173 vulnerabilities.
mozilla-nssopenSUSESandbox escape due to use-after-free in the Disability Access APIs component9.8 Criticalmozilla-nssopenSUSEJIT miscompilation in the JavaScript Engine: JIT component9.8 Criticalmozilla-nssopenSUSEInteger overflow in the JavaScript: WebAssembly component9.8 Criticalmozilla-nssopenSUSEIncorrect boundary conditions in the JavaScript: WebAssembly component9.8 Criticalmozilla-nssopenSUSESandbox escape due to invalid pointer in the Disability Access APIs component10.0 Criticalmozilla-nssopenSUSEInformation disclosure in the Graphics: ImageLib component7.5 Highmozilla-nssopenSUSEInvalid pointer in the DOM: Bindings (WebIDL) component9.8 Criticalmozilla-nssopenSUSEPrivilege escalation in the DOM: Navigation component8.8 Highmozilla-nssopenSUSEPrivilege escalation in the DOM: Workers component8.8 Highmozilla-nssopenSUSEIncorrect boundary conditions in the Audio/Video: Playback component9.1 Criticalmozilla-nssopenSUSEJIT miscompilation in the JavaScript: WebAssembly component9.8 Criticalmozilla-nssopenSUSESandbox escape due to use-after-free in the Disability Access APIs component9.8 Criticalmozilla-nssopenSUSESandbox escape due to use-after-free in the DOM: Navigation component9.8 Criticalmozilla-nssopenSUSEUse-after-free in the WebRTC: Audio/Video component8.8 Highmozilla-nssopenSUSEIncorrect boundary conditions in the Audio/Video: cubeb component9.8 Criticalmozilla-nssopenSUSESame-origin policy bypass in the DOM: Navigation component9.8 Criticalmozilla-nssopenSUSEInteger overflow in the Libraries component in NSS9.8 Criticalmozilla-nssopenSUSEMemory safety bugs fixed in Firefox 142 and Thunderbird 1429.8 Criticalmozilla-nssopenSUSENSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 Mediummozilla-nssopenSUSEAn attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary...8.8 Highmozilla-nssopenSUSERemoval of TrustCor root certificate6.8 Mediummozilla-nssopenSUSEA vulnerability found in nss. By this security vulnerability, nss client auth crash without a...7.5 Highmozilla-nssopenSUSEA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 Highmozilla-nssopenSUSE<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 Mediummozilla-nssopenSUSENSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap...9.8 Criticalmozilla-nssopenSUSEA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw...7.5 Highmozilla-nssopenSUSEA flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55....9.1 Criticalmozilla-nssopenSUSEWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 Mediummozilla-nssopenSUSEDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 Mediummozilla-nssopenSUSEDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 Mediummozilla-nssopenSUSENSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 Mediummozilla-nssopenSUSEIn Network Security Services (NSS) before 3.46, several cryptographic primitives had missing...9.8 Criticalmozilla-nssopenSUSEWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 Highmozilla-nssopenSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highmozilla-nssopenSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediummozilla-nssopenSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highmozilla-nssopenSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 Mediummozilla-nssopenSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highmozilla-nssopenSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediummozilla-nssopenSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediummozilla-nssopenSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalmozilla-nssopenSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highmozilla-nssopenSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highmozilla-nssopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalmozilla-nssopenSUSEAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 Criticalmozilla-nssopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 Criticalmozilla-nssopenSUSEA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 Criticalmozilla-nssopenSUSEIn Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can...6.5 Mediummozilla-nssopenSUSEA cached side channel attack during handshakes using RSA encryption could allow for the...5.9 Mediummozilla-nssopenSUSEWhen handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random...5.9 Medium- Show moreLoading…