4781 matches found
Debian: Security Advisory (DLA-2836-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Critical Photon OS Security Update - PHSA-2021-4.0-0135
Updates of 'nss' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2021-3.0-0337
Updates of 'nss' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2021-0454
Updates of 'nss' packages of Photon OS have been released...
Critical: Red Hat Security Advisory: nss security update
An update for nss is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Updated nss packages fix security vulnerability
NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS 7, or PKCS 12 are likely to be impacted. Applications using NSS...
MGASA-2021-0534 Updated nss packages fix security vulnerability
NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS 7, or PKCS 12 are likely to be impacted. Applications using NSS...
[SECURITY] [DLA 2836-1] nss security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2836-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 02, 2021 https://wiki.debian.org/LTS -...
Critical Bug in Mozilla's NSS Crypto Library Potentially Affects Several Other Software
Mozilla has rolled out fixes to address a critical security weakness in its cross-platform Network Security Services NSS cryptographic library that could be potentially exploited by an adversary to crash a vulnerable application and even execute arbitrary code. Tracked as CVE-2021-43527, the flaw...
Mozilla Releases Security Updates for Network Security Services
Mozilla has released security updates to address a vulnerability in Network Security Services NSS. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the Mozilla Security Advisory for NSS and apply the necessary...
Ubuntu 16.04 ESM : NSS vulnerability (USN-5168-3)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5168-3 advisory. USN-5168-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...
RHEL 6 : nss (RHSA-2021:4907)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4907 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
Debian DSA-5016-1 : nss - security update
The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5016 advisory. Tavis Ormandy discovered that nss, the Mozilla Network Security Service library, is prone to a heap overflow flaw when verifying DSA or RSA-PPS signatures, which coul...
Mozilla Network Security Services Buffer Overflow Vulnerability (CNVD-2021-102398)
Mozilla Network Security Services NSS is a library of functions Network Security Services library from the Mozilla Foundation in the United States. The product provides cross-platform support for SSL, S/MIME and other Internet security standards. A security vulnerability exists in verifies...
Ubuntu: Security Advisory (USN-5168-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-5168-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : nss (RHSA-2021:4903)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4903 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
RHEL 7 : nss (RHSA-2021:4904)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4904 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
Ubuntu 18.04 LTS / 20.04 LTS : NSS vulnerability (USN-5168-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5168-1 advisory. Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS signatures. A remote attacker could use this issue to cause NSS to crash,...