Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:0758
HistoryMar 09, 2021 - 8:47 a.m.

(RHSA-2021:0758) Moderate: nss-softokn security update

2021-03-0908:47:28
access.redhat.com
40

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.3%

JSON

The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

Security Fix(es):

  • nss: Use-after-free in sftk_FreeSession due to improper refcounting (CVE-2019-11756)

  • nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)

  • nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read (CVE-2020-12403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64nss-softokn-freebl-devel< 3.28.3-10.el7_4nss-softokn-freebl-devel-3.28.3-10.el7_4.x86_64.rpm
RedHat7ppc64lenss-softokn-freebl< 3.28.3-10.el7_4nss-softokn-freebl-3.28.3-10.el7_4.ppc64le.rpm
RedHat7i686nss-softokn< 3.28.3-10.el7_4nss-softokn-3.28.3-10.el7_4.i686.rpm
RedHat7i686nss-softokn-freebl-devel< 3.28.3-10.el7_4nss-softokn-freebl-devel-3.28.3-10.el7_4.i686.rpm
RedHat7ppc64lenss-softokn-devel< 3.28.3-10.el7_4nss-softokn-devel-3.28.3-10.el7_4.ppc64le.rpm
RedHat7ppc64lenss-softokn-freebl-devel< 3.28.3-10.el7_4nss-softokn-freebl-devel-3.28.3-10.el7_4.ppc64le.rpm
RedHat7i686nss-softokn-devel< 3.28.3-10.el7_4nss-softokn-devel-3.28.3-10.el7_4.i686.rpm
RedHat7i686nss-softokn-freebl< 3.28.3-10.el7_4nss-softokn-freebl-3.28.3-10.el7_4.i686.rpm
RedHat7x86_64nss-softokn-freebl< 3.28.3-10.el7_4nss-softokn-freebl-3.28.3-10.el7_4.x86_64.rpm
RedHat7x86_64nss-softokn-debuginfo< 3.28.3-10.el7_4nss-softokn-debuginfo-3.28.3-10.el7_4.x86_64.rpm
Rows per page:
1-10 of 151

Related

nessus 61
redhat 14
ibm 7
almalinux 2
oraclelinux 3
rocky 2
openvas 33
debiancve 3
cve 3
ubuntu 4
ubuntucve 3
osv 7
veracode 2
symantec 1
debian 4
redhatcve 3
prion 3
f5 1
cbl_mariner 2
amazon 2
centos 1
alpinelinux 1
suse 2
photon 6
gentoo 1
rosalinux 1
ics 1
mageia 1
archlinux 1
mozilla 1
kaspersky 1
nessus
nessus
RHEL 7 : nss-softokn (RHSA-2021:1026)
2021-04-21 00:00:00
RHEL 7 : nss-softokn (RHSA-2021:0758)
2021-03-09 00:00:00
RHEL 7 : nss and nss-softokn (RHSA-2021:0876)
2021-03-17 00:00:00
redhat
redhat
(RHSA-2021:1026) Moderate: nss-softokn security update
2021-03-30 07:24:03
(RHSA-2021:0876) Moderate: nss and nss-softokn security update
2021-03-16 13:07:08
(RHSA-2020:3280) Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
ibm
ibm
Security Bulletin: IBM MQ Appliance is affected by multiple nss and nspr vulnerabilities
2021-01-21 09:32:12
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-17006, CVE-2019-17023, CVE-2020-12403)
2021-07-08 17:59:28
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities
2021-01-12 10:59:54
almalinux
almalinux
Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
Moderate: nss security and bug fix update
2021-02-16 07:32:47
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2020-08-04 00:00:00
nss and nspr security, bug fix, and enhancement update
2020-10-08 00:00:00
nss security and bug fix update
2021-02-17 00:00:00
rocky
rocky
nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
nss security and bug fix update
2021-02-16 07:32:47
openvas
openvas
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2022-1847)
2022-06-16 00:00:00
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2022-2203)
2022-08-01 00:00:00
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2022-1871)
2022-06-16 00:00:00
debiancve
debiancve
CVE-2019-11756
2020-01-08 20:15:00
CVE-2019-17006
2020-10-22 21:15:00
CVE-2020-12403
2021-05-27 19:15:00
cve
cve
CVE-2019-17006
2020-10-22 21:15:00
CVE-2019-11756
2020-01-08 20:15:00
CVE-2020-12403
2021-05-27 19:15:00
ubuntu
ubuntu
NSS vulnerability
2020-01-08 00:00:00
NSS vulnerability
2020-08-27 00:00:00
Firefox vulnerabilities
2019-12-09 00:00:00
ubuntucve
ubuntucve
CVE-2019-17006
2019-12-31 00:00:00
CVE-2019-11756
2019-12-04 00:00:00
CVE-2020-12403
2020-08-18 00:00:00
osv
osv
nss - security update
2020-01-06 00:00:00
Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
CVE-2020-12403
2021-05-27 19:15:07
veracode
veracode
Denial Of Service (DoS)
2020-08-04 02:02:53
Denial Of Service (DoS)
2020-08-06 21:32:12
symantec
symantec
Mozilla Network Security Services CVE-2019-17006 Heap Buffer Overflow Vulnerability
2019-12-26 00:00:00
debian
debian
[SECURITY] [DLA 2058-1] nss security update
2020-01-06 23:25:44
[SECURITY] [DSA 4726-1] nss security update
2020-07-17 18:06:14
[SECURITY] [DLA 2388-1] nss security update
2020-09-29 19:15:28
redhatcve
redhatcve
CVE-2019-17006
2019-12-26 06:08:47
CVE-2020-12403
2020-08-14 13:13:30
CVE-2019-11756
2019-12-10 03:17:56
prion
prion
Input validation
2020-01-08 20:15:00
Buffer overflow
2020-10-22 21:15:00
Heap overflow
2021-05-27 19:15:00
f5
f5
K13290208 : NSS vulnerability CVE-2020-12403
2021-04-16 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-12403 affecting package nss 3.44-11
2022-04-09 06:52:33
CVE-2020-12403 affecting package nss 3.44-6
2021-06-14 21:14:09
amazon
amazon
Medium: nspr, nss-softokn, nss-util
2021-07-08 18:41:00
Medium: nspr, nss-softokn, nss-util, nss
2020-11-09 21:02:00
centos
centos
nspr, nss security update
2020-11-06 22:01:52
alpinelinux
alpinelinux
CVE-2020-12403
2021-05-27 19:15:00
suse
suse
Security update for mozilla-nspr, mozilla-nss (important)
2020-06-24 00:00:00
Security update for mozilla-nspr, mozilla-nss (moderate)
2020-01-12 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0474
2022-10-21 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0404
2021-06-17 00:00:00
Critical Photon OS Security Update - PHSA-2021-0404
2021-06-17 00:00:00
gentoo
gentoo
Mozilla Network Security Service (NSS): Multiple vulnerabilities
2020-08-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2223
2023-08-29 12:02:20
ics
ics
Siemens RUGGEDCOM ROX II
2021-02-09 12:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2020-08-18 20:41:27
archlinux
archlinux
[ASA-201912-1] firefox: multiple issues
2019-12-03 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in - Firefox 71 — Mozilla
2019-12-03 00:00:00
kaspersky
kaspersky
KLA11611 Multiple vulnerabilities in Mozilla Firefox
2019-12-03 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.3%

JSON
Related for RHSA-2021:0758
nessus61redhat14ibm7almalinux2oraclelinux3rocky2openvas33debiancve3cve3ubuntu4ubuntucve3osv7veracode2symantec1debian4redhatcve3prion3f51cbl_mariner2amazon2centos1alpinelinux1suse2photon6gentoo1rosalinux1ics1mageia1archlinux1mozilla1kaspersky1