A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nss | Aug 22, 2024 | May 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade nss-debuginfoUpgrade nss-pkcs11-develUpgrade nss-sysinitUpgrade nssUpgrade nss-develUpgrade nss-tools | Apr 27, 2020 | May 2, 2019 |
| Amazon_linux | — | Upgrade nsprUpgrade nss-softoknUpgrade nssUpgrade nss-util | Mar 19, 2020 | Dec 13, 2018 |
| Centos_linux | — | Upgrade nss-softokn-freeblUpgrade nss-utilUpgrade nss-sysinitUpgrade nss-develUpgrade nss-softokn-debuginfoUpgrade nss-toolsUpgrade nss-softokn-develUpgrade nss-pkcs11-develUpgrade nsprUpgrade nss | Aug 28, 2019 | May 2, 2019 |
| Debian | — | Upgrade nss | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-softokn | Dec 4, 2019 | May 2, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nssUpgrade nss-toolsUpgrade nss-develUpgrade nss-sysinit | Nov 19, 2019 | May 2, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nssUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-devel | Sep 24, 2019 | May 2, 2019 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.42.1-11.4.11.0.1.2.0 on Solaris 11.4 | Jul 17, 2019 | May 2, 2019 |
| Oracle_linux | — | Upgrade nss-softoknUpgrade nss-util-develUpgrade nss-toolsUpgrade nss-sysinitUpgrade nsprUpgrade nspr-develUpgrade nssUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nss-devel | Jul 21, 2020 | Nov 30, 2018 |
| Redhat_linux | — | Upgrade nssUpgrade nss-softokn-debuginfoUpgrade nss-utilUpgrade nsprUpgrade nss-sysinitUpgrade nss-softokn-develUpgrade nss-toolsUpgrade nss-debuginfoUpgrade nss-develUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nspr-develUpgrade nspr-debuginfoUpgrade nss-pkcs11-develNo solution existsUpgrade nss-softokn-freebl-develUpgrade nss-util-develUpgrade nss-util-debuginfo | Aug 7, 2019 | May 2, 2019 |
| Suse | — | Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-toolsUpgrade libfreebl3-hmac-32bitUpgrade mozilla-nss-sysinitUpgrade libsoftokn3Upgrade mozilla-nss-certsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-develUpgrade libsoftokn3-hmac-32bitUpgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3-hmacUpgrade mozilla-nspr-32bitUpgrade libfreebl3Upgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3-hmacUpgrade mozilla-nspr-develUpgrade mozillafirefox-buildsymbolsUpgrade libfreebl3-32bitUpgrade libsoftokn3-32bitUpgrade mozilla-nsprUpgrade MozillaFirefox-translations-common | Dec 14, 2018 | Dec 13, 2018 |
| Ubuntu | — | Upgrade libnss3 | Jan 16, 2019 | Dec 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub