vulnerability

Amazon Linux 2023: CVE-2023-0767: Important priority package update for nss

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
9	(AV:N/AC:M/Au:N/C:C/I:C/A:C)	Feb 14, 2023	Feb 17, 2025	Jul 9, 2025

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Feb 14, 2023

Added

Feb 17, 2025

Modified

Jul 9, 2025

Description

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
The Mozilla Foundation Security Advisory describes this flaw as:
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled.

Solutions

amazon-linux-2023-upgrade-nspramazon-linux-2023-upgrade-nspr-debuginfoamazon-linux-2023-upgrade-nspr-develamazon-linux-2023-upgrade-nssamazon-linux-2023-upgrade-nss-debuginfoamazon-linux-2023-upgrade-nss-debugsourceamazon-linux-2023-upgrade-nss-develamazon-linux-2023-upgrade-nss-pkcs11-develamazon-linux-2023-upgrade-nss-softoknamazon-linux-2023-upgrade-nss-softokn-debuginfoamazon-linux-2023-upgrade-nss-softokn-develamazon-linux-2023-upgrade-nss-softokn-freeblamazon-linux-2023-upgrade-nss-softokn-freebl-debuginfoamazon-linux-2023-upgrade-nss-softokn-freebl-develamazon-linux-2023-upgrade-nss-sysinitamazon-linux-2023-upgrade-nss-sysinit-debuginfoamazon-linux-2023-upgrade-nss-toolsamazon-linux-2023-upgrade-nss-tools-debuginfoamazon-linux-2023-upgrade-nss-utilamazon-linux-2023-upgrade-nss-util-debuginfoamazon-linux-2023-upgrade-nss-util-devel

References

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today