Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:DLA-154-1
HistoryFeb 16, 2015 - 12:00 a.m.

nss - security update

2015-02-1600:00:00
Google
osv.dev
11

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.039 Low

EPSS

Percentile

90.7%

JSON

nss 3.12.8-1+squeeze11 fixes two security issues:

  • CVE-2011-3389
    SSL 3.0 and TLS 1.0 connections were vulnerable to some chosen
    plaintext attacks which allowed man-in-the middle attackers to obtain
    plaintext HTTP headers on an HTTPS session. This issue is known as
    the BEAST attack.
  • CVE-2014-1569
    Possible information leak with too-permissive ASN.1 DER decoding of
    length.

For Debian 6 Squeeze, these issues have been fixed in nss version 3.12.8-1+squeeze11

Related

nessus 41
openvas 72
debian 7
fedora 24
exploitpack 1
zdt 1
prion 2
veracode 3
mskb 1
debiancve 2
cve 3
checkpoint_security 1
ibm 9
cert 1
checkpoint_advisories 2
seebug 2
ics 1
securityvulns 13
ubuntu 1
osv 3
ubuntucve 2
freebsd 2
rubygems 1
rapid7blog 1
f5 2
archlinux 1
nessus
nessus
Debian DLA-154-1 : nss security update (BEAST)
2015-03-26 00:00:00
Oracle iPlanet Web Server 6.1.x < 6.1.21 / 7.0.x < 7.0.22 NSS Signature Handling Remote Code Injection
2015-07-23 00:00:00
Oracle Fusion Middleware Security Service Information Disclosure (January 2015 CPU) (BEAST)
2015-01-27 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-154-1)
2023-03-08 00:00:00
Fedora Update for thunderbird FEDORA-2011-17399
2012-01-23 00:00:00
Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)
2012-01-11 00:00:00
debian
debian
[SECURITY] [DLA 154-1] nss security update
2015-02-16 15:44:22
[SECURITY] [DSA 3186-1] nss security update
2015-03-13 08:15:52
[SECURITY] [DSA 3186-1] nss security update
2015-03-13 08:15:52
fedora
fedora
[SECURITY] Fedora 21 Update: nss-3.17.3-2.fc21
2014-12-25 05:35:12
[SECURITY] Fedora 16 Update: nss-softokn-3.13.1-14.fc16
2011-12-23 03:31:27
[SECURITY] Fedora 16 Update: xulrunner-9.0-2.fc16
2011-12-23 03:31:27
exploitpack
exploitpack
MatrixSSL 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates
2019-02-20 00:00:00
zdt
zdt
MatrixSSL < 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates Vulnerability
2019-02-20 00:00:00
prion
prion
Session fixation
2011-09-06 19:55:00
Design/Logic Flaw
2014-12-15 18:59:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-02 04:55:58
HTTP Request Smuggling
2019-01-15 09:03:35
Blockwise Chosen-boundary Attacks
2017-04-27 06:38:37
mskb
mskb
MS12-006: Vulnerability in SSL/TLS could allow information disclosure: January 10, 2012
2012-01-10 00:00:00
debiancve
debiancve
CVE-2011-3389
2011-09-06 19:55:00
CVE-2014-1569
2014-12-15 18:59:00
cve
cve
CVE-2014-1569
2014-12-15 18:59:00
CVE-2011-3389
2011-09-06 19:55:00
CVE-2004-2770
2011-09-25 10:55:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2011-3389 aka BEAST attack
2012-10-15 22:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in SSL and TLS protocols affect the IBM FlashSystem V840 (CVE-2011-3389)
2018-06-18 00:09:28
Security Bulletin: IBM System x and Flex Systems Browser Exploit Against SSL/TLS (BEAST) Mitigations (CVE-2011-3389)
2022-05-16 16:03:13
Security Bulletin: Vulnerabilities in SSL and TLS protocols affects SAN Volume Controller and Storwize Family (CVE-2011-3389)
2023-03-29 01:48:02
cert
cert
SSL 3.0 and TLS 1.0 allow chosen plaintext attack in CBC modes
2011-09-27 00:00:00
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against SSL and TLS Protocols Information Disclosure (MS12-006; CVE-2011-3389)
2012-01-10 00:00:00
Web Servers SSL Flooding Denial of Service (CVE-2011-3389)
2011-11-06 00:00:00
seebug
seebug
Microsoft Windows SSL/TLS信息泄露漏洞
2011-09-29 00:00:00
Apple XCode 4.x 信息泄露漏洞
2012-07-27 00:00:00
ics
ics
Siemens Ruggedcom WIN Products BEAST Attack Vulnerability
2018-09-06 12:00:00
securityvulns
securityvulns
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST &#40;Browser Exploit Against SSL/TLS&#41; attacks
2014-05-05 00:00:00
ESA-2012-032: RSA BSAFE&#40;r&#41; Micro Edition Suite Security Update for BEAST &#40;Browser Exploit Against SSL/TLS&#41; attacks
2012-10-29 00:00:00
ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities
2014-04-07 00:00:00
ubuntu
ubuntu
NSS vulnerability
2015-01-07 00:00:00
osv
osv
nss - security update
2015-03-13 00:00:00
lighttpd - several
2011-12-20 00:00:00
curl - several
2012-03-31 00:00:00
ubuntucve
ubuntucve
CVE-2014-1569
2014-12-15 00:00:00
CVE-2011-3389
2011-11-16 00:00:00
freebsd
freebsd
fetchmail -- chosen plaintext attack against SSL CBC initialization vectors
2012-01-19 00:00:00
asterisk -- Multiple vulnerabilities
2016-02-03 00:00:00
rubygems
rubygems
CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
2011-08-31 00:00:00
rapid7blog
rapid7blog
New Rapid7 MDR Essentials Capability Sees What Attackers See: “It’s Eye-Opening”
2021-09-01 13:11:33
f5
f5
K13400 : SSL 3.0/TLS 1.0 vulnerability CVE-2011-3389 and TLS protocol vulnerability CVE-2012-1870
2015-06-16 00:00:00
SOL13400 - SSL 3.0/TLS 1.0 BEAST vulnerability CVE-2011-3389 and TLS protocol vulnerability CVE-2012-1870
2012-03-06 00:00:00
archlinux
archlinux
nss: signature forgery
2014-12-16 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.039 Low

EPSS

Percentile

90.7%

JSON
Related for OSV:DLA-154-1
nessus41openvas72debian7fedora24exploitpack1zdt1prion2veracode3mskb1debiancve2cve3checkpoint_security1ibm9cert1checkpoint_advisories2seebug2ics1securityvulns13ubuntu1osv3ubuntucve2freebsd2rubygems1rapid7blog1f52archlinux1