Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2020-0088-1.NASL
HistoryJan 15, 2020 - 12:00 a.m.

SUSE SLED12 / SLES12 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:0088-1)

2020-01-1500:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
52

7.5 High

AI Score

Confidence

Low

JSON

This update for mozilla-nspr, mozilla-nss fixes the following issues :

mozilla-nss was updated to NSS 3.47.1 :

Security issues fixed :

CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).

CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).

CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).

mozilla-nspr was updated to version 4.23: Whitespace in C files was cleaned up and no longer uses tab characters for indenting.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2020:0088-1.
# The text itself is copyright (C) SUSE.
#

include('compat.inc');

if (description)
{
  script_id(132924);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/29");

  script_cve_id("CVE-2019-11727", "CVE-2019-11745", "CVE-2019-17006");

  script_name(english:"SUSE SLED12 / SLES12 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:0088-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"This update for mozilla-nspr, mozilla-nss fixes the following issues :

mozilla-nss was updated to NSS 3.47.1 :

Security issues fixed :

CVE-2019-17006: Added length checks for cryptographic primitives
(bsc#1159819).

CVE-2019-11745: EncryptUpdate should use maxout, not block size
(bsc#1158527).

CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1
v1.5 signatures issue (bsc#1141322).

mozilla-nspr was updated to version 4.23: Whitespace in C files was
cleaned up and no longer uses tab characters for indenting.

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1141322");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1158527");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1159819");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-11745/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-17006/");
  # https://www.suse.com/support/update/announcement/2020/suse-su-20200088-1/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?32eefe4e");
  script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE OpenStack Cloud Crowbar 8:zypper in -t patch
SUSE-OpenStack-Cloud-Crowbar-8-2020-88=1

SUSE OpenStack Cloud 8:zypper in -t patch
SUSE-OpenStack-Cloud-8-2020-88=1

SUSE OpenStack Cloud 7:zypper in -t patch
SUSE-OpenStack-Cloud-7-2020-88=1

SUSE Linux Enterprise Software Development Kit 12-SP5:zypper in -t
patch SUSE-SLE-SDK-12-SP5-2020-88=1

SUSE Linux Enterprise Software Development Kit 12-SP4:zypper in -t
patch SUSE-SLE-SDK-12-SP4-2020-88=1

SUSE Linux Enterprise Server for SAP 12-SP3:zypper in -t patch
SUSE-SLE-SAP-12-SP3-2020-88=1

SUSE Linux Enterprise Server for SAP 12-SP2:zypper in -t patch
SUSE-SLE-SAP-12-SP2-2020-88=1

SUSE Linux Enterprise Server for SAP 12-SP1:zypper in -t patch
SUSE-SLE-SAP-12-SP1-2020-88=1

SUSE Linux Enterprise Server 12-SP5:zypper in -t patch
SUSE-SLE-SERVER-12-SP5-2020-88=1

SUSE Linux Enterprise Server 12-SP4:zypper in -t patch
SUSE-SLE-SERVER-12-SP4-2020-88=1

SUSE Linux Enterprise Server 12-SP3-LTSS:zypper in -t patch
SUSE-SLE-SERVER-12-SP3-2020-88=1

SUSE Linux Enterprise Server 12-SP3-BCL:zypper in -t patch
SUSE-SLE-SERVER-12-SP3-BCL-2020-88=1

SUSE Linux Enterprise Server 12-SP2-LTSS:zypper in -t patch
SUSE-SLE-SERVER-12-SP2-2020-88=1

SUSE Linux Enterprise Server 12-SP2-BCL:zypper in -t patch
SUSE-SLE-SERVER-12-SP2-BCL-2020-88=1

SUSE Linux Enterprise Server 12-SP1-LTSS:zypper in -t patch
SUSE-SLE-SERVER-12-SP1-2020-88=1

SUSE Linux Enterprise Desktop 12-SP4:zypper in -t patch
SUSE-SLE-DESKTOP-12-SP4-2020-88=1

SUSE Enterprise Storage 5:zypper in -t patch SUSE-Storage-5-2020-88=1

SUSE CaaS Platform 3.0 :

To install this update, use the SUSE CaaS Platform Velum dashboard. It
will inform you if it detects new updates and let you then trigger
updating of the complete cluster in a controlled way.

HPE Helion Openstack 8:zypper in -t patch
HPE-Helion-OpenStack-8-2020-88=1");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-17006");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/07/23");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/01/13");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/01/15");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libfreebl3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libfreebl3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libfreebl3-hmac");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsoftokn3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsoftokn3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libsoftokn3-hmac");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nspr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nspr-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nspr-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nspr-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-certs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-certs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-sysinit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-sysinit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:mozilla-nss-tools-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED12|SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED12 / SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(1|2|3|4|5)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP1/2/3/4/5", os_ver + " SP" + sp);
if (os_ver == "SLED12" && (! preg(pattern:"^(4)$", string:sp))) audit(AUDIT_OS_NOT, "SLED12 SP4", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"1", reference:"libfreebl3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libfreebl3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libfreebl3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libfreebl3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libfreebl3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libfreebl3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libsoftokn3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libsoftokn3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libsoftokn3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libsoftokn3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libsoftokn3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libsoftokn3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nspr-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nspr-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nspr-debuginfo-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nspr-debuginfo-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nspr-debugsource-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nspr-devel-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-certs-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-certs-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-certs-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-certs-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-debugsource-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-devel-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-sysinit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-sysinit-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-sysinit-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-sysinit-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-tools-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"mozilla-nss-tools-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libfreebl3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libfreebl3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libfreebl3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libfreebl3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libfreebl3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libfreebl3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libsoftokn3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libsoftokn3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libsoftokn3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libsoftokn3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libsoftokn3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libsoftokn3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nspr-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nspr-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nspr-debuginfo-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nspr-debuginfo-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nspr-debugsource-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-certs-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-certs-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-certs-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-certs-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-debugsource-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-sysinit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-sysinit-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-sysinit-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-sysinit-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-tools-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"mozilla-nss-tools-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libfreebl3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libfreebl3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libfreebl3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libfreebl3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libfreebl3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libfreebl3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libsoftokn3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libsoftokn3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libsoftokn3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libsoftokn3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libsoftokn3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libsoftokn3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nspr-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nspr-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nspr-debuginfo-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nspr-debuginfo-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nspr-debugsource-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nspr-devel-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-certs-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-certs-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-certs-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-certs-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-debugsource-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-devel-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-sysinit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-sysinit-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-sysinit-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-sysinit-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-tools-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"mozilla-nss-tools-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libfreebl3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libfreebl3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libfreebl3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libfreebl3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libfreebl3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libfreebl3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libsoftokn3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libsoftokn3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libsoftokn3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libsoftokn3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libsoftokn3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libsoftokn3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nspr-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nspr-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nspr-debuginfo-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nspr-debuginfo-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nspr-debugsource-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-certs-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-certs-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-certs-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-certs-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-debugsource-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-sysinit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-sysinit-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-sysinit-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-sysinit-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-tools-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"mozilla-nss-tools-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libfreebl3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libfreebl3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libfreebl3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libfreebl3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libfreebl3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libfreebl3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libsoftokn3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libsoftokn3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libsoftokn3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libsoftokn3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libsoftokn3-hmac-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libsoftokn3-hmac-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nspr-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nspr-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nspr-debuginfo-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nspr-debuginfo-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nspr-debugsource-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-certs-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-certs-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-certs-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-certs-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-debugsource-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-sysinit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-sysinit-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-sysinit-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-sysinit-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-tools-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"mozilla-nss-tools-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libfreebl3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libfreebl3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libfreebl3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libfreebl3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libsoftokn3-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libsoftokn3-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libsoftokn3-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libsoftokn3-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nspr-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nspr-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nspr-debuginfo-32bit-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nspr-debuginfo-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nspr-debugsource-4.23-19.12.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-certs-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-certs-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-certs-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-certs-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-debugsource-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-sysinit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-sysinit-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-sysinit-debuginfo-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-sysinit-debuginfo-32bit-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-tools-3.47.1-58.34.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"mozilla-nss-tools-debuginfo-3.47.1-58.34.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "mozilla-nspr / mozilla-nss");
}
VendorProductVersionCPE
novellsuse_linuxlibfreebl3p-cpe:/a:novell:suse_linux:libfreebl3
novellsuse_linuxlibfreebl3-debuginfop-cpe:/a:novell:suse_linux:libfreebl3-debuginfo
novellsuse_linuxlibfreebl3-hmacp-cpe:/a:novell:suse_linux:libfreebl3-hmac
novellsuse_linuxlibsoftokn3p-cpe:/a:novell:suse_linux:libsoftokn3
novellsuse_linuxlibsoftokn3-debuginfop-cpe:/a:novell:suse_linux:libsoftokn3-debuginfo
novellsuse_linuxlibsoftokn3-hmacp-cpe:/a:novell:suse_linux:libsoftokn3-hmac
novellsuse_linuxmozilla-nsprp-cpe:/a:novell:suse_linux:mozilla-nspr
novellsuse_linuxmozilla-nspr-debuginfop-cpe:/a:novell:suse_linux:mozilla-nspr-debuginfo
novellsuse_linuxmozilla-nspr-debugsourcep-cpe:/a:novell:suse_linux:mozilla-nspr-debugsource
novellsuse_linuxmozilla-nspr-develp-cpe:/a:novell:suse_linux:mozilla-nspr-devel
Rows per page:
1-10 of 211

Related

openvas 31
nessus 75
suse 3
ibm 12
osv 7
debiancve 3
prion 3
ubuntucve 3
cve 3
ubuntu 4
veracode 3
alpinelinux 1
redhatcve 3
symantec 1
debian 5
oraclelinux 6
redhat 14
mageia 1
centos 3
ics 1
photon 2
amazon 7
almalinux 1
rocky 1
gentoo 1
archlinux 1
kaspersky 1
altlinux 1
slackware 1
mozilla 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0088-1)
2021-04-19 00:00:00
openSUSE: Security Advisory for mozilla-nspr, mozilla-nss (openSUSE-SU-2020:0008-1)
2020-01-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:3395-1)
2021-06-09 00:00:00
nessus
nessus
openSUSE Security Update : mozilla-nspr / mozilla-nss (openSUSE-2020-8)
2020-01-13 00:00:00
SUSE SLED15 / SLES15 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2019:3395-1)
2019-12-31 00:00:00
SUSE SLES11 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:14418-1)
2021-06-10 00:00:00
suse
suse
Security update for mozilla-nspr, mozilla-nss (moderate)
2020-01-12 00:00:00
Security update for mozilla-nspr, mozilla-nss (important)
2020-06-24 00:00:00
Security update for MozillaThunderbird (important)
2020-01-09 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in nss and nspr CVE-2019-17006.
2021-09-22 23:38:15
Security Bulletin: A security vulnerabilitiy has been fixed in IBM Security Identity Manager Virtual Appliance(CVE-2019-17006)
2021-05-20 18:59:37
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-11745)
2021-01-12 20:25:53
osv
osv
nss - security update
2020-01-06 00:00:00
nss - security update
2019-11-25 00:00:00
CVE-2019-11745
2020-01-08 20:15:12
debiancve
debiancve
CVE-2019-17006
2020-10-22 21:15:00
CVE-2019-11745
2020-01-08 20:15:00
CVE-2019-11727
2019-07-23 14:15:00
prion
prion
Design/Logic Flaw
2019-07-23 14:15:00
Design/Logic Flaw
2020-01-08 20:15:00
Buffer overflow
2020-10-22 21:15:00
ubuntucve
ubuntucve
CVE-2019-11727
2019-07-11 00:00:00
CVE-2019-17006
2019-12-31 00:00:00
CVE-2019-11745
2019-11-25 00:00:00
cve
cve
CVE-2019-17006
2020-10-22 21:15:00
CVE-2019-11727
2019-07-23 14:15:00
CVE-2019-11745
2020-01-08 20:15:00
ubuntu
ubuntu
NSS vulnerability
2020-01-08 00:00:00
NSS vulnerability
2019-11-27 00:00:00
NSS vulnerability
2019-11-27 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-12-10 00:18:20
Insecure Certificate Signature Signing
2020-09-21 06:30:08
Denial Of Service (DoS)
2020-08-04 02:02:53
alpinelinux
alpinelinux
CVE-2019-11745
2020-01-08 20:15:00
redhatcve
redhatcve
CVE-2019-11727
2019-07-18 06:22:12
CVE-2019-17006
2019-12-26 06:08:47
CVE-2019-11745
2020-04-06 17:07:36
symantec
symantec
Mozilla Network Security Services CVE-2019-17006 Heap Buffer Overflow Vulnerability
2019-12-26 00:00:00
debian
debian
[SECURITY] [DLA 2058-1] nss security update
2020-01-06 23:25:44
[SECURITY] [DLA 2008-1] nss security update
2019-11-25 23:15:08
[SECURITY] [DSA 4579-1] nss security update
2019-12-06 21:54:22
oraclelinux
oraclelinux
nss security update
2019-12-09 00:00:00
nss-softokn security update
2019-12-11 00:00:00
nss, nss-softokn, nss-util security update
2019-12-11 00:00:00
redhat
redhat
(RHSA-2019:4152) Important: nss-softokn security update
2019-12-10 10:02:18
(RHSA-2019:4114) Important: nss security update
2019-12-09 12:58:06
(RHSA-2020:0466) Important: nss-softokn security update
2020-02-11 08:06:00
mageia
mageia
Updated nss packages fix security vulnerability
2019-12-08 21:12:18
centos
centos
nss security update
2019-12-11 17:44:29
nss security update
2019-12-24 15:55:26
nspr, nss security update
2020-11-06 22:01:52
ics
ics
Siemens RUGGEDCOM ROX II
2021-02-09 12:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0474
2022-10-21 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0619
2023-07-27 00:00:00
amazon
amazon
Important: nss-util
2023-02-17 00:11:00
Important: nss-util
2024-02-15 03:52:00
Important: nss
2020-01-14 20:03:00
almalinux
almalinux
Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
rocky
rocky
nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
gentoo
gentoo
Mozilla Network Security Service: Multiple vulnerabilities
2020-03-16 00:00:00
archlinux
archlinux
[ASA-201912-2] thunderbird: arbitrary code execution
2019-12-06 00:00:00
kaspersky
kaspersky
KLA11612 Multiple vulnerabilities in Mozilla Firefox ESR
2019-12-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.3.0-alt1
2019-12-05 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2019-12-03 19:30:37
mozilla
mozilla
Security Vulnerabilities fixed in - Thunderbird 68.3 — Mozilla
2019-12-03 00:00:00

7.5 High

AI Score

Confidence

Low

JSON
Related for SUSE_SU-2020-0088-1.NASL
openvas31nessus75suse3ibm12osv7debiancve3prion3ubuntucve3cve3ubuntu4veracode3alpinelinux1redhatcve3symantec1debian5oraclelinux6redhat14mageia1centos3ics1photon2amazon7almalinux1rocky1gentoo1archlinux1kaspersky1altlinux1slackware1mozilla1