Lucene search

K
osvGoogleOSV:ALSA-2024:0105
HistoryJan 10, 2024 - 12:00 a.m.

Moderate: nss security update

2024-01-1000:00:00
Google
osv.dev
11
network security services
libraries
cross-platform
security-enabled
client
server
cve-2023-5388
cvss score
references
software

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

10.3%

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

  • nss: timing attack against RSA decryption (CVE-2023-5388)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.