A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nss | Aug 22, 2024 | May 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade nss-develUpgrade nss-sysinitUpgrade nssUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade nss-debuginfo | Apr 27, 2020 | May 2, 2019 |
| Amazon_linux | — | Upgrade nss-utilUpgrade nsprUpgrade nssUpgrade nss-softokn | Mar 19, 2020 | Dec 13, 2018 |
| Centos_linux | — | Upgrade nss-softokn-freebl-develUpgrade nss-util-develUpgrade nspr-debuginfoUpgrade nss-util-debuginfoUpgrade nss-softoknUpgrade nss-debuginfoUpgrade nss-pkcs11-develUpgrade nsprUpgrade nss-sysinitUpgrade nss-softokn-debuginfoUpgrade nspr-devel | Aug 28, 2019 | May 2, 2019 |
| Debian | — | Upgrade nss | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nss-softoknUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-softokn-devel | Dec 4, 2019 | May 2, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nssUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-devel | Nov 19, 2019 | May 2, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nss-develUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss | Sep 24, 2019 | May 2, 2019 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.42.1-11.4.11.0.1.2.0 on Solaris 11.4 | Jul 17, 2019 | May 2, 2019 |
| Oracle_linux | — | Upgrade nss-softokn-develUpgrade nss-pkcs11-develUpgrade nss-softokn-freeblUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nsprUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-softoknUpgrade nssUpgrade nss-util-develUpgrade nspr-devel | Jul 21, 2020 | Nov 30, 2018 |
| Redhat_linux | — | Upgrade nss-debuginfoUpgrade nssUpgrade nss-utilUpgrade nss-toolsUpgrade nss-softokn-freeblUpgrade nss-develUpgrade nsprUpgrade nss-sysinitUpgrade nss-softokn-debuginfoUpgrade nss-softokn-develUpgrade nspr-develUpgrade nss-softoknUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nspr-debuginfoNo solution existsUpgrade nss-util-debuginfoUpgrade nss-util-devel | Aug 7, 2019 | May 2, 2019 |
| Suse | — | Upgrade mozilla-nss-develUpgrade mozilla-nss-sysinitUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3-hmac-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certsUpgrade MozillaFirefox-develUpgrade mozilla-nss-toolsUpgrade libsoftokn3Upgrade libsoftokn3-hmacUpgrade mozilla-nssUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nsprUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-32bitUpgrade MozillaFirefoxUpgrade mozilla-nspr-develUpgrade mozilla-nspr-32bitUpgrade libfreebl3-32bitUpgrade mozillafirefox-buildsymbolsUpgrade libsoftokn3-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3-hmacUpgrade libfreebl3 | Dec 14, 2018 | Dec 13, 2018 |
| Ubuntu | — | Upgrade libnss3 | Jan 16, 2019 | Dec 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub