It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade nss-utilUpgrade nss-softoknUpgrade nss | Dec 16, 2016 | Nov 16, 2016 |
| Centos_linux | — | Upgrade nssUpgrade nss-pkcs11-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-develUpgrade nss-utilUpgrade nss-util-devel | Jan 27, 2017 | Nov 16, 2016 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Aug 1, 2018 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Oct 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nss-util-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-utilUpgrade nss-develUpgrade nss | Nov 30, 2017 | Nov 16, 2016 |
| Oracle_linux | — | Upgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nssUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-util | Nov 16, 2016 | Nov 16, 2016 |
| Redhat_linux | — | Upgrade nss-sysinitUpgrade nss-develUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nss-util-develUpgrade nssUpgrade nss-utilUpgrade nss-pkcs11-develUpgrade nss-debuginfo | Nov 16, 2016 | Nov 16, 2016 |
| Suse | — | Upgrade mozilla-nss-toolsUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3Upgrade java-1_8_0-openjdk-develUpgrade MozillaFirefoxUpgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinitUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade mozilla-nspr-develUpgrade java-1_8_0-openjdk-headlessUpgrade mozilla-nss-develUpgrade libsoftokn3Upgrade mozilla-nss-certsUpgrade MozillaFirefox-develUpgrade libsoftokn3-x86Upgrade libfreebl3-hmac-32bitUpgrade mozilla-nspr-x86Upgrade MozillaFirefox-translationsUpgrade libfreebl3-x86Upgrade libsoftokn3-32bitUpgrade java-1_8_0-openjdk-demoUpgrade libsoftokn3-hmac-32bitUpgrade libsoftokn3-hmacUpgrade libfreebl3-hmacUpgrade java-1_8_0-openjdkUpgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade mozilla-nss-certs-32bit | May 4, 2017 | Nov 16, 2016 |
| Ubuntu | — | Upgrade libnss3 | Jan 5, 2017 | Nov 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub