A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade nss-util-develUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nss-develUpgrade nss-softoknUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-softokn-develUpgrade nss-toolsUpgrade nssUpgrade nspr-develUpgrade nss-util-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-pkcs11-devel | Nov 12, 2020 | Jul 23, 2019 |
| Amazon_linux | — | Upgrade nss-utilUpgrade nss-softoknUpgrade nspr | Jul 13, 2021 | Jul 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Centos_linux | — | Upgrade nspr-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-utilUpgrade nssUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-util-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-sysinitUpgrade nss-debugsourceUpgrade nspr-debugsourceUpgrade nss-toolsUpgrade nss-tools-debuginfoUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-softokn-develUpgrade nss-debuginfoUpgrade nspr-develUpgrade nss-util-devel | Aug 28, 2019 | Jul 23, 2019 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Jul 23, 2019 |
| Freebsd | — | Upgrade firefoxUpgrade libxulUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefox-esrUpgrade waterfoxUpgrade linux-firefox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0Upgrade to the latest version of Mozilla Firefox | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.45-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jul 23, 2019 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-sysinitUpgrade nss-util-develUpgrade nss-softokn-develUpgrade nssUpgrade nspr-develUpgrade nss-toolsUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-softokn | Oct 9, 2020 | Jul 9, 2019 |
| Redhat_linux | — | Upgrade nss-util-debuginfoNo solution existsUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nspr-debugsourceUpgrade nss-tools-debuginfoUpgrade nss-debuginfoUpgrade nspr-develUpgrade nssUpgrade nss-softoknUpgrade nss-debugsourceUpgrade nsprUpgrade nss-softokn-freeblUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-softokn-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-utilUpgrade nss-develUpgrade nss-pkcs11-devel | Jul 31, 2019 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-libgtk-3-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nsprUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-32bitUpgrade firefox-gio-branding-upstreamUpgrade libfreebl3Upgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-langUpgrade firefox-glib2-langUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozillafirefox-branding-sleUpgrade mozillafirefox-branding-upstreamUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nss-certsUpgrade firefox-libharfbuzz0Upgrade mozilla-nssUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-branding-upstreamUpgrade MozillaThunderbird-buildsymbolsUpgrade libfirefox-gio-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-atk-langUpgrade MozillaFirefox-develUpgrade MozillaThunderbirdUpgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-glib2-toolsUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-develUpgrade firefox-libcairo2Upgrade enigmailUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-toolsUpgrade firefox-libpango-1_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-langUpgrade libfirefox-glib-2_0-0Upgrade libsoftokn3Upgrade mozilla-nspr-develUpgrade firefox-libffi4Upgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-certs-32bitUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nss-32bitUpgrade firefox-gtk3-dataUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-ximUpgrade MozillaThunderbird-translations-other | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub