Lucene search
GoogleOSV:USN-5168-4HistoryDec 07, 2021 - 7:35 p.m.
nss regression
2021-12-0719:35:28
Google
osv.dev
10
nss
regression
vulnerability
update
ssl connections
denial of service
arbitrary code
tavis ormandy
USN-5168-3 fixed a vulnerability in NSS. Unfortunately that update introduced
a regression that could break SSL connections. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS
signatures. A remote attacker could use this issue to cause NSS to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Related
nessus
nessus
Debian DSA-5016-1 : nss - security update
2021-12-02 00:00:00
Photon OS 4.0: Nss PHSA-2021-4.0-0135
2021-12-04 00:00:00
Amazon Linux 2 : nspr (ALAS-2023-1953)
2023-02-23 00:00:00
photon
photon
ibm
ibm
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3939-1)
2021-12-07 00:00:00
Fedora: Security Advisory for nss (FEDORA-2021-d8e9f6222a)
2021-12-04 00:00:00
Slackware: Security Advisory (SSA:2021-337-01)
2022-04-21 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-43527 affecting package nss 3.44-6
2022-01-10 03:59:22
CVE-2021-43527 affecting package nss for versions less than 3.75-1
2022-04-09 06:52:33
veracode
veracode
Remote Code Execution (RCE)
2021-12-07 15:48:58
redhat
redhat
(RHSA-2021:4919) Critical: nss security update
2021-12-02 18:11:26
(RHSA-2021:4907) Critical: nss security update
2021-12-01 22:00:25
(RHSA-2021:4953) Critical: nss security update
2021-12-06 18:53:38
archlinux
archlinux
[ASA-202112-3] nss: arbitrary code execution
2021-12-03 00:00:00
[ASA-202112-4] lib32-nss: arbitrary code execution
2021-12-03 00:00:00
amazon
amazon
Critical: nss
2023-02-17 00:11:00
Critical: nss-util
2023-02-17 00:11:00
Critical: nss, nss-util, nss-softokn, nspr
2021-12-01 07:11:00
debian
debian
[SECURITY] [DLA 2836-2] nss regression update
2021-12-07 23:07:16
[SECURITY] [DSA 5016-1] nss security update
2021-12-01 21:51:16
[SECURITY] [DLA 2836-1] nss security update
2021-12-02 13:03:34
osv
osv
Critical: nss security update
2021-12-01 17:52:10
nss vulnerability
2021-12-01 16:49:18
nss vulnerability
2021-12-01 18:02:43
oraclelinux
oraclelinux
nss security update
2021-12-01 00:00:00
nss security update
2021-12-07 00:00:00
nss security update
2021-12-01 00:00:00
ubuntu
ubuntu
NSS vulnerability
2021-12-01 00:00:00
NSS regression
2021-12-07 00:00:00
Thunderbird vulnerability
2021-12-01 00:00:00
mageia
mageia
Updated nss packages fix security vulnerability
2021-12-02 19:49:28
alpinelinux
alpinelinux
CVE-2021-43527
2021-12-08 22:15:09
cvelist
cvelist
CVE-2021-43527
2021-12-08 00:00:00
CVE-2021-43529
2023-02-16 00:00:00
nvd
nvd
CVE-2021-43527
2021-12-08 22:15:09
CVE-2021-43529
2023-02-16 22:15:10
redhatcve
redhatcve
CVE-2021-43527
2021-12-01 17:07:57
CVE-2021-43529
2022-05-12 15:33:14
cloudfoundry
cloudfoundry
USN-5168-1: NSS vulnerability | Cloud Foundry
2022-01-20 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: nss-3.73.0-1.fc35
2021-12-04 01:24:11
[SECURITY] Fedora 34 Update: nss-3.73.0-1.fc34
2021-12-05 01:40:38
centos
centos
nss security update
2021-12-06 16:52:37
suse
suse
Security update for mozilla-nss (important)
2021-12-06 00:00:00
Security update for mozilla-nss (important)
2022-07-22 00:00:00
Security update for mozilla-nss (important)
2022-07-29 00:00:00
freebsd
freebsd
NSS -- Memory corruption
2021-12-01 00:00:00
cnvd
cnvd
debiancve
debiancve
CVE-2021-43527
2021-12-08 22:15:09
CVE-2021-43529
2023-02-16 22:15:10
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 91.3 — Mozilla
2021-11-03 00:00:00
thn
thn
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-43527
2021-12-20 12:12:34
Fix of CVE: CVE-2021-43527
2021-12-06 15:23:50
rocky
rocky
nss security update
2021-12-01 17:52:10
slackware
slackware
[slackware-security] mozilla-nss
2023-01-07 02:09:10
[slackware-security] mozilla-nss
2021-12-03 20:11:32
prion
prion
Heap overflow
2021-12-08 22:15:00
Heap overflow
2023-02-16 22:15:00
f5
f5
K54450124 : NSS vulnerability CVE-2021-43527
2022-01-28 00:00:00
K000130509 : Thunderbird vulnerability CVE-2021-43529
2023-01-06 00:00:00
almalinux
almalinux
Critical: nss security update
2021-12-01 17:52:10
cve
cve
CVE-2021-43527
2021-12-08 22:15:09
CVE-2021-43529
2023-02-16 22:15:10
googleprojectzero
googleprojectzero
This shouldn't have happened: A vulnerability postmortem
2021-12-01 00:00:00
ubuntucve
ubuntucve
CVE-2021-43529
2023-02-16 00:00:00
CVE-2021-43527
2021-12-01 00:00:00
trellix
trellix
The Bug Report - December 2021 Edition
2022-01-19 00:00:00
The Bug Report - December 2021 Edition
2022-01-19 00:00:00
gentoo
gentoo
Mozilla Network Security Service (NSS): Multiple Vulnerabilities
2022-12-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2223
2023-08-29 12:02:20