CVE-2018-12384

🗓️ 29 Apr 2019 14:22:53Reported by mozillaType

Server vulnerability in SSLv2-compatible ClientHello request handling, allows malleability of ClientHello for SSLv2, affecting TLS 1.2 prior to NSS 3.3

Reporter	Title	Published	Views	Family All 119
IBM Security Bulletins	Security Bulletin: A vulnerability in NSS affects PowerKVM	17 Dec 201814:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2018-12384	7 Dec 202119:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a Mozilla Network Security Services (NSS) vulnerability (CVE-2018-12384)	21 Feb 201911:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been addressed in IBM Security Privileged Identity Manager	19 Sep 201900:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple vulnerabilities	19 Sep 201900:39	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Storage - GlusterFS and Minio	12 Mar 201914:40	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private Kiali Istio addon	11 Mar 201915:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Logging	7 Mar 201920:10	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Monitoring	7 Mar 201920:10	–	ibm

NVD

Vulners

Node

mozilla network_security_servicesRange<3.39

[
  {
    "product": "Network Security Services (NSS)",
    "vendor": "NSS",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to NSS 3.39"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi

21 Nov 2024 03:45Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 35.9

EPSS0.00622

CWE-335