1800 matches found
nss: vulnerable to Minerva side-channel information leak
The Network Security Services NSS package contains a vulnerability that exposes a side-channel information leak. This weakness enables a local attacker to capture several thousand usages of a signature, allowing them to utilize this information to recover portions of an ECDSA private key...
nss: vulnerable to Minerva side-channel information leak
The Network Security Services NSS package contains a vulnerability that exposes a side-channel information leak. This weakness enables a local attacker to capture several thousand usages of a signature, allowing them to utilize this information to recover portions of an ECDSA private key...
Moderate: Red Hat Bug Fix Advisory: nss bug fix and enhancement update
An update for nss is now available for Red Hat Enterprise Linux 9.2 Extended Update Support and Red Hat Enterprise Linux 9. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Bug Fixes and...
Mozilla: Memory corruption in NSS
The Mozilla Foundation Security Advisory describes this flaw as: A mismatch between allocator and deallocator could have lead to memory corruption...
Mozilla: Memory corruption in NSS
The Mozilla Foundation Security Advisory describes this flaw as: A mismatch between allocator and deallocator could have lead to memory corruption...
RHSA-2017:1101 Red Hat Security Advisory: nss security update
Bulletin has no description...
RHSA-2014:1371 Red Hat Security Advisory: nss security update
Bulletin has no description...
RHSA-2014:1307 Red Hat Security Advisory: nss security update
Bulletin has no description...
RHSA-2013:1841 Red Hat Security Advisory: nss security update
Bulletin has no description...
RHSA-2013:1840 Red Hat Security Advisory: nss security update
Bulletin has no description...
RHSA-2024:0105 Red Hat Security Advisory: nss security update
Bulletin has no description...
RHSA-2024:0108 Red Hat Security Advisory: nss security update
Bulletin has no description...
RHSA-2024:0106 Red Hat Security Advisory: nss security update
Bulletin has no description...
The vulnerability of the NSS encryption component in Mozilla Firefox and Firefox ESR browsers allows attackers to gain access to protected information.
The vulnerability of the CKMCHACHA20 font set in Mozilla Firefox and Firefox ESR browsers is related to the possibility of buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a call to PK11Encrypt...
[SECURITY] Fedora 40 Update: nss-3.103.0-1.fc40
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
Fedora: Security Advisory for nss (FEDORA-2024-7f0a88301b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
krb5: GSS message token handling
A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...
DEBIAN-CVE-2024-7531
Calling PK11Encrypt in NSS using CKMCHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the ChaCha20-Poly1305 cipher suite. The most likely outcom...