A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nss | Aug 22, 2024 | May 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade nss-debuginfoUpgrade nss-toolsUpgrade nssUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-sysinit | Apr 27, 2020 | May 2, 2019 |
| Amazon_linux | — | Upgrade nss-utilUpgrade nssUpgrade nsprUpgrade nss-softokn | Mar 19, 2020 | Dec 13, 2018 |
| Centos_linux | — | Upgrade nspr-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-util-debuginfoUpgrade nss-util-develUpgrade nss-softoknUpgrade nss-debuginfoUpgrade nss-softokn-develUpgrade nss-develUpgrade nsprUpgrade nss-softokn-debuginfoUpgrade nss-pkcs11-develUpgrade nss-sysinitUpgrade nss-softokn-freeblUpgrade nss-util | Aug 28, 2019 | May 2, 2019 |
| Debian | — | Upgrade nss | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nss-softoknUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-softokn-devel | Dec 4, 2019 | May 2, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nss-develUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss | Nov 19, 2019 | May 2, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nss-develUpgrade nss-sysinitUpgrade nssUpgrade nss-tools | Sep 24, 2019 | May 2, 2019 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.42.1-11.4.11.0.1.2.0 on Solaris 11.4 | Jul 17, 2019 | May 2, 2019 |
| Oracle_linux | — | Upgrade nspr-develUpgrade nss-sysinitUpgrade nsprUpgrade nssUpgrade nss-util-develUpgrade nss-softoknUpgrade nss-toolsUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nss-develUpgrade nss-softokn-develUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-devel | Jul 21, 2020 | Nov 30, 2018 |
| Redhat_linux | — | Upgrade nss-debuginfoUpgrade nss-softokn-develUpgrade nspr-develUpgrade nss-softoknUpgrade nssUpgrade nss-sysinitUpgrade nss-develUpgrade nss-softokn-debuginfoUpgrade nss-toolsUpgrade nss-utilUpgrade nsprUpgrade nss-softokn-freeblUpgrade nss-softokn-freebl-develNo solution existsUpgrade nss-util-debuginfoUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nspr-debuginfo | Aug 7, 2019 | May 2, 2019 |
| Suse | — | Upgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade libsoftokn3-hmacUpgrade MozillaFirefoxUpgrade libfreebl3Upgrade mozillafirefox-buildsymbolsUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3-hmacUpgrade mozilla-nspr-develUpgrade mozilla-nssUpgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-develUpgrade libfreebl3-hmac-32bitUpgrade mozilla-nss-sysinitUpgrade libsoftokn3-hmac-32bitUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certs | Dec 14, 2018 | Dec 13, 2018 |
| Ubuntu | — | Upgrade libnss3 | Jan 16, 2019 | Dec 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub