Lucene search
RedHatRHSA-2024:0785HistoryFeb 12, 2024 - 1:38 p.m.
(RHSA-2024:0785) Moderate: nss security update
2024-02-1213:38:59
access.redhat.com
17
nss
network security services
libraries
cross-platform development
security-enabled
minerva
side-channel
information leak
cve-2023-6135
unix
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
20.6%
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.
Security Fix(es):
- nss: vulnerable to Minerva side-channel information leak (CVE-2023-6135)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | aarch64 | nss-softokn | < 3.90.0-6.el8_8 | nss-softokn-3.90.0-6.el8_8.aarch64.rpm |
| RedHat | 8 | i686 | nss-softokn-freebl | < 3.90.0-6.el8_8 | nss-softokn-freebl-3.90.0-6.el8_8.i686.rpm |
| RedHat | 8 | x86_64 | nss-debuginfo | < 3.90.0-6.el8_8 | nss-debuginfo-3.90.0-6.el8_8.x86_64.rpm |
| RedHat | 8 | aarch64 | nss-tools-debuginfo | < 3.90.0-6.el8_8 | nss-tools-debuginfo-3.90.0-6.el8_8.aarch64.rpm |
| RedHat | 8 | s390x | nss-debugsource | < 3.90.0-6.el8_8 | nss-debugsource-3.90.0-6.el8_8.s390x.rpm |
| RedHat | 8 | x86_64 | nss-softokn-freebl-devel | < 3.90.0-6.el8_8 | nss-softokn-freebl-devel-3.90.0-6.el8_8.x86_64.rpm |
| RedHat | 8 | ppc64le | nss-util-debuginfo | < 3.90.0-6.el8_8 | nss-util-debuginfo-3.90.0-6.el8_8.ppc64le.rpm |
| RedHat | 8 | s390x | nss-sysinit | < 3.90.0-6.el8_8 | nss-sysinit-3.90.0-6.el8_8.s390x.rpm |
| RedHat | 8 | x86_64 | nss-debugsource | < 3.90.0-6.el8_8 | nss-debugsource-3.90.0-6.el8_8.x86_64.rpm |
| RedHat | 8 | x86_64 | nss-softokn-debuginfo | < 3.90.0-6.el8_8 | nss-softokn-debuginfo-3.90.0-6.el8_8.x86_64.rpm |
Related
nessus
nessus
Amazon Linux 2 : nss-softokn (ALAS-2024-2456)
2024-02-19 00:00:00
Oracle Linux 9 : nss (ELSA-2024-0790)
2024-02-14 00:00:00
RHEL 9 : nss (RHSA-2024:0790)
2024-02-12 00:00:00
debiancve
debiancve
CVE-2023-6135
2023-12-19 14:15:07
prion
prion
Code injection
2023-12-19 14:15:00
oraclelinux
oraclelinux
nss security update
2024-02-13 00:00:00
nss security update
2024-04-19 00:00:00
nss security update
2024-02-13 00:00:00
vulnrichment
vulnrichment
CVE-2023-6135
2023-12-19 13:38:46
redhat
redhat
(RHSA-2024:0786) Moderate: nss security update
2024-02-12 13:39:06
(RHSA-2024:0790) Moderate: nss security update
2024-02-12 16:31:35
(RHSA-2024:0791) Moderate: nss security update
2024-02-12 16:31:43
cve
cve
CVE-2023-6135
2023-12-19 14:15:07
almalinux
almalinux
Moderate: nss security update
2024-02-12 00:00:00
Moderate: nss security update
2024-02-12 00:00:00
alpinelinux
alpinelinux
CVE-2023-6135
2023-12-19 14:15:07
osv
osv
Moderate: nss security update
2024-03-12 15:41:47
Moderate: nss security update
2024-02-12 00:00:00
Moderate: nss security update
2024-02-12 00:00:00
amazon
amazon
Medium: nss-softokn
2024-02-15 03:52:00
nvd
nvd
CVE-2023-6135
2023-12-19 14:15:07
ubuntucve
ubuntucve
CVE-2023-6135
2023-12-20 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in nss library (CVE-2023-6135) affects Power HMC.
2024-09-10 15:16:08
Security Bulletin: IBM MQ Appliance is affected by multiple open source vulnerabilities.
2024-08-03 05:43:42
Security Bulletin: App Connect Enterprise Certified Container UBI updates
2024-03-07 14:53:54
rocky
rocky
nss security update
2024-03-12 15:41:47
redhatcve
redhatcve
CVE-2023-6135
2024-01-11 09:00:57
cvelist
cvelist
CVE-2023-6135
2023-12-19 13:38:46
ubuntu
ubuntu
NSS regression
2024-04-11 00:00:00
NSS vulnerabilities
2024-04-10 00:00:00
Firefox vulnerabilities
2024-01-02 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6727-1)
2024-04-11 00:00:00
Ubuntu: Security Advisory (USN-6727-2)
2024-04-12 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-53, MFSA2023-56) - Windows
2023-12-21 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 121 — Mozilla
2023-12-19 00:00:00
kaspersky
kaspersky
KLA62517 Multiple vulnerabilities in Mozilla Firefox
2023-12-19 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
20.6%
Related for RHSA-2024:0785