Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-12384
HistoryApr 29, 2019 - 3:29 p.m.

CVE-2018-12384

2019-04-2915:29:00
CWE-335
[email protected]
web.nvd.nist.gov
174
cve-2018-12384
sslv2
clienthello
vulnerability
tls 1.2
nss 3.39

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.3%

JSON

When handling a SSLv2-compatible ClientHello request, the server doesn’t generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.

VendorProductVersionCPE
mozillanetwork_security_services*cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*

Related

nessus 29
fedora 12
oraclelinux 2
ibm 10
f5 1
redhatcve 1
debiancve 1
openvas 21
osv 1
redhat 3
amazon 2
prion 1
mageia 1
alpinelinux 1
ubuntucve 1
veracode 1
centos 2
suse 2
ubuntu 2
photon 2
oracle 2
nessus
nessus
OracleVM 3.3 / 3.4 : nss (OVMSA-2018-0264)
2018-10-11 00:00:00
Oracle Linux 7 : nss (ELSA-2018-2768)
2018-09-27 00:00:00
CentOS 6 : nss (CESA-2018:2898)
2018-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: nss-3.39.0-1.0.fc27
2018-09-18 07:52:53
[SECURITY] Fedora 27 Update: nss-util-3.39.0-1.0.fc27
2018-09-18 07:52:53
[SECURITY] Fedora 29 Update: nspr-4.20.0-1.fc29
2018-09-21 05:42:26
oraclelinux
oraclelinux
nss security update
2018-09-25 00:00:00
nss security update
2018-10-09 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in NSS affects PowerKVM
2018-12-17 14:25:02
Security Bulletin: IBM MQ Appliance is affected by a Mozilla Network Security Services (NSS) vulnerability (CVE-2018-12384)
2019-02-21 11:30:01
Security Bulletin: This Power System update is being released to address CVE-2018-12384
2021-12-07 19:14:45
f5
f5
K41738501 : Mozilla NSS vulnerability CVE-2018-12384
2018-10-26 00:00:00
redhatcve
redhatcve
CVE-2018-12384
2019-10-09 22:23:49
debiancve
debiancve
CVE-2018-12384
2019-04-29 15:29:00
openvas
openvas
Fedora Update for nss FEDORA-2018-4a21a8ca59
2018-09-19 00:00:00
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2019-1169)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2018-0393)
2022-01-28 00:00:00
osv
osv
CVE-2018-12384
2019-04-29 15:29:00
redhat
redhat
(RHSA-2018:2768) Moderate: nss security update
2018-09-25 17:31:15
(RHSA-2018:2898) Moderate: nss security update
2018-10-09 14:49:24
(RHSA-2018:3505) Critical: Red Hat Ansible Tower 3.3.1-2 Release - Container Image
2018-11-06 15:39:03
amazon
amazon
Medium: nss
2018-10-23 18:41:00
Medium: nss
2018-10-24 16:35:00
prion
prion
Design/Logic Flaw
2019-04-29 15:29:00
mageia
mageia
Updated firefox packages fix security vulnerability
2018-10-01 11:44:39
alpinelinux
alpinelinux
CVE-2018-12384
2019-04-29 15:29:00
ubuntucve
ubuntucve
CVE-2018-12384
2018-09-04 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:26:13
centos
centos
nss security update
2018-10-09 20:22:27
nss security update
2018-09-28 16:44:15
suse
suse
Security update for mozilla-nss (moderate)
2018-12-13 12:16:00
Security update for mozilla-nspr and mozilla-nss (moderate)
2018-12-28 21:12:25
ubuntu
ubuntu
NSS vulnerabilities
2019-01-09 00:00:00
NSS vulnerabilities
2019-02-18 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0239
2019-06-17 00:00:00
Important Photon OS Security Update - PHSA-2019-0172
2019-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.3%

JSON
Related for CVE-2018-12384
nessus29fedora12oraclelinux2ibm10f51redhatcve1debiancve1openvas21osv1redhat3amazon2prion1mageia1alpinelinux1ubuntucve1veracode1centos2suse2ubuntu2photon2oracle2