Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS-2018-1095
HistoryOct 23, 2018 - 6:41 p.m.

Medium: nss

2018-10-2318:41:00
alas.aws.amazon.com
524

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.3%

JSON

Issue Overview:

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack.(CVE-2018-12384)

Affected Packages:

nss

Issue Correction:
Run yum update nss to update your system.

New Packages:

i686:  
    nss-devel-3.36.0-5.82.amzn1.i686  
    nss-sysinit-3.36.0-5.82.amzn1.i686  
    nss-debuginfo-3.36.0-5.82.amzn1.i686  
    nss-3.36.0-5.82.amzn1.i686  
    nss-tools-3.36.0-5.82.amzn1.i686  
    nss-pkcs11-devel-3.36.0-5.82.amzn1.i686  
  
src:  
    nss-3.36.0-5.82.amzn1.src  
  
x86_64:  
    nss-debuginfo-3.36.0-5.82.amzn1.x86_64  
    nss-3.36.0-5.82.amzn1.x86_64  
    nss-sysinit-3.36.0-5.82.amzn1.x86_64  
    nss-tools-3.36.0-5.82.amzn1.x86_64  
    nss-devel-3.36.0-5.82.amzn1.x86_64  
    nss-pkcs11-devel-3.36.0-5.82.amzn1.x86_64

Additional References

Red Hat: CVE-2018-12384

Mitre: CVE-2018-12384

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686nss-devel< 3.36.0-5.82.amzn1nss-devel-3.36.0-5.82.amzn1.i686.rpm
Amazon Linux1i686nss-sysinit< 3.36.0-5.82.amzn1nss-sysinit-3.36.0-5.82.amzn1.i686.rpm
Amazon Linux1i686nss-debuginfo< 3.36.0-5.82.amzn1nss-debuginfo-3.36.0-5.82.amzn1.i686.rpm
Amazon Linux1i686nss< 3.36.0-5.82.amzn1nss-3.36.0-5.82.amzn1.i686.rpm
Amazon Linux1i686nss-tools< 3.36.0-5.82.amzn1nss-tools-3.36.0-5.82.amzn1.i686.rpm
Amazon Linux1i686nss-pkcs11-devel< 3.36.0-5.82.amzn1nss-pkcs11-devel-3.36.0-5.82.amzn1.i686.rpm
Amazon Linux1x86_64nss-debuginfo< 3.36.0-5.82.amzn1nss-debuginfo-3.36.0-5.82.amzn1.x86_64.rpm
Amazon Linux1x86_64nss< 3.36.0-5.82.amzn1nss-3.36.0-5.82.amzn1.x86_64.rpm
Amazon Linux1x86_64nss-sysinit< 3.36.0-5.82.amzn1nss-sysinit-3.36.0-5.82.amzn1.x86_64.rpm
Amazon Linux1x86_64nss-tools< 3.36.0-5.82.amzn1nss-tools-3.36.0-5.82.amzn1.x86_64.rpm
Rows per page:
1-10 of 121

Related

nessus 29
fedora 12
oraclelinux 2
ibm 10
f5 1
redhatcve 1
cve 1
openvas 21
debiancve 1
prion 1
mageia 1
alpinelinux 1
ubuntucve 1
osv 1
redhat 3
centos 2
veracode 1
amazon 1
suse 2
ubuntu 2
photon 2
oracle 2
nessus
nessus
OracleVM 3.3 / 3.4 : nss (OVMSA-2018-0264)
2018-10-11 00:00:00
Oracle Linux 7 : nss (ELSA-2018-2768)
2018-09-27 00:00:00
CentOS 6 : nss (CESA-2018:2898)
2018-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: nss-3.39.0-1.0.fc27
2018-09-18 07:52:53
[SECURITY] Fedora 27 Update: nss-util-3.39.0-1.0.fc27
2018-09-18 07:52:53
[SECURITY] Fedora 29 Update: nspr-4.20.0-1.fc29
2018-09-21 05:42:26
oraclelinux
oraclelinux
nss security update
2018-09-25 00:00:00
nss security update
2018-10-09 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in NSS affects PowerKVM
2018-12-17 14:25:02
Security Bulletin: IBM MQ Appliance is affected by a Mozilla Network Security Services (NSS) vulnerability (CVE-2018-12384)
2019-02-21 11:30:01
Security Bulletin: This Power System update is being released to address CVE-2018-12384
2021-12-07 19:14:45
f5
f5
K41738501 : Mozilla NSS vulnerability CVE-2018-12384
2018-10-26 00:00:00
redhatcve
redhatcve
CVE-2018-12384
2019-10-09 22:23:49
cve
cve
CVE-2018-12384
2019-04-29 15:29:00
openvas
openvas
Fedora Update for nss FEDORA-2018-4a21a8ca59
2018-09-19 00:00:00
CentOS Update for nss CESA-2018:2898 centos6
2018-10-10 00:00:00
Fedora Update for nss-util FEDORA-2018-1a7a5c54c2
2018-09-15 00:00:00
debiancve
debiancve
CVE-2018-12384
2019-04-29 15:29:00
prion
prion
Design/Logic Flaw
2019-04-29 15:29:00
mageia
mageia
Updated firefox packages fix security vulnerability
2018-10-01 11:44:39
alpinelinux
alpinelinux
CVE-2018-12384
2019-04-29 15:29:00
ubuntucve
ubuntucve
CVE-2018-12384
2018-09-04 00:00:00
osv
osv
CVE-2018-12384
2019-04-29 15:29:00
redhat
redhat
(RHSA-2018:2768) Moderate: nss security update
2018-09-25 17:31:15
(RHSA-2018:2898) Moderate: nss security update
2018-10-09 14:49:24
(RHSA-2018:3505) Critical: Red Hat Ansible Tower 3.3.1-2 Release - Container Image
2018-11-06 15:39:03
centos
centos
nss security update
2018-10-09 20:22:27
nss security update
2018-09-28 16:44:15
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:26:13
amazon
amazon
Medium: nss
2018-10-24 16:35:00
suse
suse
Security update for mozilla-nss (moderate)
2018-12-13 12:16:00
Security update for mozilla-nspr and mozilla-nss (moderate)
2018-12-28 21:12:25
ubuntu
ubuntu
NSS vulnerabilities
2019-01-09 00:00:00
NSS vulnerabilities
2019-02-18 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0239
2019-06-17 00:00:00
Important Photon OS Security Update - PHSA-2019-0172
2019-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.3%

JSON
Related for ALAS-2018-1095
nessus29fedora12oraclelinux2ibm10f51redhatcve1cve1openvas21debiancve1prion1mageia1alpinelinux1ubuntucve1osv1redhat3centos2veracode1amazon1suse2ubuntu2photon2oracle2