A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nss | Aug 22, 2024 | May 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade nss-debuginfoUpgrade nss-develUpgrade nssUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade nss-sysinit | Apr 27, 2020 | May 2, 2019 |
| Amazon_linux | — | Upgrade nsprUpgrade nss-softoknUpgrade nssUpgrade nss-util | Mar 19, 2020 | Dec 13, 2018 |
| Centos_linux | — | Upgrade nss-softokn-debuginfoUpgrade nsprUpgrade nss-develUpgrade nss-utilUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade nss-softokn-develUpgrade nss-sysinitUpgrade nss-softoknUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-util-debuginfoUpgrade nss-util-develUpgrade nss-debuginfo | Aug 28, 2019 | May 2, 2019 |
| Debian | — | Upgrade nss | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nss-softoknUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-softokn-devel | Dec 4, 2019 | May 2, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nss-develUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss | Nov 19, 2019 | May 2, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nss-develUpgrade nssUpgrade nss-toolsUpgrade nss-sysinit | Sep 24, 2019 | May 2, 2019 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.42.1-11.4.11.0.1.2.0 on Solaris 11.4 | Jul 17, 2019 | May 2, 2019 |
| Oracle_linux | — | Upgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-sysinitUpgrade nssUpgrade nss-util-develUpgrade nss-toolsUpgrade nspr-develUpgrade nspr | Jul 21, 2020 | Nov 30, 2018 |
| Redhat_linux | — | Upgrade nss-softokn-develUpgrade nss-develUpgrade nss-toolsUpgrade nss-softokn-freeblUpgrade nss-softokn-debuginfoUpgrade nss-utilUpgrade nss-softoknUpgrade nss-sysinitUpgrade nspr-develUpgrade nsprUpgrade nssUpgrade nss-debuginfoUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nss-util-develUpgrade nss-util-debuginfoNo solution existsUpgrade nspr-debuginfo | Aug 7, 2019 | May 2, 2019 |
| Suse | — | Upgrade libfreebl3-hmac-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-develUpgrade mozilla-nss-certsUpgrade mozilla-nss-certs-32bitUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-sysinitUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade libsoftokn3Upgrade MozillaFirefoxUpgrade libfreebl3Upgrade libsoftokn3-32bitUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3-hmacUpgrade mozilla-nssUpgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3-32bitUpgrade libfreebl3-hmacUpgrade mozilla-nspr-devel | Dec 14, 2018 | Dec 13, 2018 |
| Ubuntu | — | Upgrade libnss3 | Jan 16, 2019 | Dec 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub