Denial Of Service (DoS)

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. A flaw was found in the way NSS handled...

Timing Side-Channel

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. It was discovered that NSS leaked timin...

ALPINE-CVE-2018-12384

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3...

The vulnerability of the Certificate Management Server component in the Network Security Services library allows a perpetrator to trigger a service failure.

The vulnerability of the Certificate Management Server CMS component in the NSS library set is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Wireshark Denial of Service Vulnerability (CNVD-2019-12178)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.GSS-API dissector is one of the GSS-API Generic Security Services Application Programmin...

Code injection

The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the...

CVE-2010-5305

CVE-2010-5305 affects Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The vulnerability arises from exposure of the product password used to restrict unauthorized access, enabling an unauthorized programming/configuration client to gain access and make changes to the product’s con...

Security Bulletin: Security vulnerabilities have been identified in IBM Java shipped with IBM Tivoli Security Policy Manager(CVE-2019-2426, CVE-2018-12547, CVE-2018-1890)

Summary IBM Tivoli Security Policy Manager TSPM is affected through IBM WebSphere Application Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...

UBUNTU-CVE-2017-2659

It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts...

Security Bulletin: A Security Vulnerability affects IBM Cloud Private Kiali Istio addon

Summary A Security Vulnerability affects IBM Cloud Private Kiali Istio addon Vulnerability Details CVEID: CVE-2018-12384 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, could allow a remote attacker to obtain sensitive information, caused by the improper handling o...

Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Logging

Summary Security Vulnerabilities affect IBM Cloud Private Logging Vulnerability Details CVEID: CVE-2018-10904 DESCRIPTION: glusterfs could allow a remote authenticated attacker to execute arbitrary code on the system, caused by improper validation of file paths in the trusted.io-stats-dump extend...

[SECURITY] Fedora 28 Update: nss-3.42.1-1.fc28

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

USN-3898-1 nss vulnerability

Hanno Böck and Damian Poddebniak discovered that NSS incorrectly handled certain CMS functions. A remote attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service...

The vulnerability of the Network Security Services library lies in the possibility of reducing the version of the TLS protocol used, allowing attackers to gain access to protected information.

The vulnerability of the Network Security Services library relates to the possibility of reducing the version of the TLS protocol used. Exploiting this vulnerability can allow an attacker to gain access to protected information through a secondary channel...

Security Bulletin: IBM MQ Appliance is affected by a Mozilla Network Security Services (NSS) vulnerability (CVE-2018-12384)

Summary IBM MQ Appliance has addressed the following Mozilla Network Security Services NSS vulnerability. Vulnerability Details CVEID: CVE-2018-12384 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, could allow a remote attacker to obtain sensitive information, caus...

Denial Of Service

Network Security Services NSS is vulnerable to denial of service DoS. The vulnerability is possible because of the flaw in the way NSS handles cryptographic data from the network, leading to an application crash or execution of arbitrary code with the permission of the user running the applicatio...

Denial Of Service (DoS)

nss is vulnerable to denial of service DoS attacks. The vulnerability exists as a use-after-free vulnerability in the ssl3HandleECDHServerKeyExchange function in Mozilla Network Security Services NSS before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of...

Denial Of Service (DoS)

nss is vulnerable to denial of service DoS attacks. The vulnerability exists as the secasn1dparseleaf function in Mozilla Network Security Services NSS before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restrict...

Man-in-the-middle Attack

Network Security Services NSS is vulnerable to a man-in-the-middle attack. The attack exists because it fails in handling state transitions for the TLS state machine and skips handshake message, allowing a man-in-the-middle to decrypt all traffic...

Denial Of Service (DoS)

nss is vulnerable to denial of service DoS attacks. The vulnerability exists as the CERTDecodeCertPackage function in Mozilla Network Security Services NSS, as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5,...