Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2018:2768
HistorySep 25, 2018 - 5:31 p.m.

(RHSA-2018:2768) Moderate: nss security update

2018-09-2517:31:15
access.redhat.com
79

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.3%

JSON

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

  • nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello (CVE-2018-12384)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting this issue.

OSVersionArchitecturePackageVersionFilename
RedHat7s390nss-devel< 3.36.0-7.el7_5nss-devel-3.36.0-7.el7_5.s390.rpm
RedHat7ppc64lenss-tools< 3.36.0-7.el7_5nss-tools-3.36.0-7.el7_5.ppc64le.rpm
RedHat7s390xnss-debuginfo< 3.36.0-7.el7_5nss-debuginfo-3.36.0-7.el7_5.s390x.rpm
RedHat7i686nss< 3.36.0-7.el7_5nss-3.36.0-7.el7_5.i686.rpm
RedHat7s390xnss-devel< 3.36.0-7.el7_5nss-devel-3.36.0-7.el7_5.s390x.rpm
RedHat7aarch64nss-tools< 3.36.0-7.el7_5nss-tools-3.36.0-7.el7_5.aarch64.rpm
RedHat7s390nss< 3.36.0-7.el7_5nss-3.36.0-7.el7_5.s390.rpm
RedHat7x86_64nss-sysinit< 3.36.0-7.el7_5nss-sysinit-3.36.0-7.el7_5.x86_64.rpm
RedHat7ppc64lenss-pkcs11-devel< 3.36.0-7.el7_5nss-pkcs11-devel-3.36.0-7.el7_5.ppc64le.rpm
RedHat7ppcnss< 3.36.0-7.el7_5nss-3.36.0-7.el7_5.ppc.rpm
Rows per page:
1-10 of 421

Related

nessus 29
prion 1
fedora 12
ibm 10
alpinelinux 1
openvas 21
ubuntucve 1
mageia 1
osv 1
oraclelinux 2
amazon 2
f5 1
cve 1
debiancve 1
redhatcve 1
centos 2
veracode 1
redhat 2
suse 2
ubuntu 2
photon 2
oracle 2
nessus
nessus
EulerOS 2.0 SP2 : nss (EulerOS-SA-2018-1358)
2018-11-06 00:00:00
Fedora 28 : nspr / nss / nss-softokn / nss-util (2018-1a7a5c54c2)
2019-01-03 00:00:00
NewStart CGSL MAIN 4.05 : nss Vulnerability (NS-SA-2019-0131)
2019-08-12 00:00:00
prion
prion
Design/Logic Flaw
2019-04-29 15:29:00
fedora
fedora
[SECURITY] Fedora 27 Update: nss-softokn-3.39.0-1.0.fc27
2018-09-18 07:52:53
[SECURITY] Fedora 29 Update: nss-util-3.39.0-2.fc29
2018-09-21 05:42:27
[SECURITY] Fedora 27 Update: nss-3.39.0-1.0.fc27
2018-09-18 07:52:53
ibm
ibm
Security Bulletin: This Power System update is being released to address CVE-2018-12384
2021-12-07 19:14:45
Security Bulletin: A vulnerability in NSS affects PowerKVM
2018-12-17 14:25:02
Security Bulletin: IBM MQ Appliance is affected by a Mozilla Network Security Services (NSS) vulnerability (CVE-2018-12384)
2019-02-21 11:30:01
alpinelinux
alpinelinux
CVE-2018-12384
2019-04-29 15:29:00
openvas
openvas
Fedora Update for nss-util FEDORA-2018-1a7a5c54c2
2018-09-15 00:00:00
Fedora Update for nss-softokn FEDORA-2018-4a21a8ca59
2018-09-19 00:00:00
Fedora Update for nss-util FEDORA-2018-4a21a8ca59
2018-09-19 00:00:00
ubuntucve
ubuntucve
CVE-2018-12384
2018-09-04 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2018-10-01 11:44:39
osv
osv
CVE-2018-12384
2019-04-29 15:29:00
oraclelinux
oraclelinux
nss security update
2018-10-09 00:00:00
nss security update
2018-09-25 00:00:00
amazon
amazon
Medium: nss
2018-10-23 18:41:00
Medium: nss
2018-10-24 16:35:00
f5
f5
K41738501 : Mozilla NSS vulnerability CVE-2018-12384
2018-10-26 00:00:00
cve
cve
CVE-2018-12384
2019-04-29 15:29:00
debiancve
debiancve
CVE-2018-12384
2019-04-29 15:29:00
redhatcve
redhatcve
CVE-2018-12384
2019-10-09 22:23:49
centos
centos
nss security update
2018-10-09 20:22:27
nss security update
2018-09-28 16:44:15
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:26:13
redhat
redhat
(RHSA-2018:2898) Moderate: nss security update
2018-10-09 14:49:24
(RHSA-2018:3505) Critical: Red Hat Ansible Tower 3.3.1-2 Release - Container Image
2018-11-06 15:39:03
suse
suse
Security update for mozilla-nss (moderate)
2018-12-13 12:16:00
Security update for mozilla-nspr and mozilla-nss (moderate)
2018-12-28 21:12:25
ubuntu
ubuntu
NSS vulnerabilities
2019-02-18 00:00:00
NSS vulnerabilities
2019-01-09 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0239
2019-06-17 00:00:00
Important Photon OS Security Update - PHSA-2019-0172
2019-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.3%

JSON
Related for RHSA-2018:2768
nessus29prion1fedora12ibm10alpinelinux1openvas21ubuntucve1mageia1osv1oraclelinux2amazon2f51cve1debiancve1redhatcve1centos2veracode1redhat2suse2ubuntu2photon2oracle2