A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-util-debuginfoUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nss-util-develUpgrade nss-softoknUpgrade nss-develUpgrade nss-toolsUpgrade nssUpgrade nss-softokn-develUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nspr | Nov 12, 2020 | Jul 23, 2019 |
| Amazon_linux | — | Upgrade nss-softoknUpgrade nss-utilUpgrade nspr | Jul 13, 2021 | Jul 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Centos_linux | — | Upgrade nss-sysinit-debuginfoUpgrade nspr-debuginfoUpgrade nss-utilUpgrade nss-pkcs11-develUpgrade nss-util-debuginfoUpgrade nss-softokn-freebl-develUpgrade nssUpgrade nss-softokn-debuginfoUpgrade nss-develUpgrade nss-debugsourceUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-toolsUpgrade nss-tools-debuginfoUpgrade nspr-develUpgrade nss-softokn-freebl-debuginfoUpgrade nspr-debugsourceUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-softokn-devel | Aug 28, 2019 | Jul 23, 2019 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade waterfoxUpgrade firefox-esrUpgrade firefoxUpgrade thunderbirdUpgrade libxulUpgrade seamonkey | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.45-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jul 23, 2019 |
| Oracle_linux | — | Upgrade nss-develUpgrade nss-utilUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nss-util-develUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-toolsUpgrade nsprUpgrade nspr-devel | Oct 9, 2020 | Jul 9, 2019 |
| Redhat_linux | — | Upgrade nss-pkcs11-develUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-softokn-freeblUpgrade nss-develUpgrade nss-softokn-develUpgrade nss-utilUpgrade nss-debugsourceUpgrade nssUpgrade nss-debuginfoUpgrade nspr-debugsourceUpgrade nss-util-debuginfoUpgrade nss-sysinitNo solution existsUpgrade nss-softoknUpgrade nss-toolsUpgrade nss-tools-debuginfoUpgrade nspr-develUpgrade nss-util-devel | Jul 31, 2019 | Jul 23, 2019 |
| Suse | — | Upgrade libsoftokn3-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nspr-develUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-dataUpgrade firefox-libatk-1_0-0Upgrade mozillafirefox-buildsymbolsUpgrade firefox-gtk3-immodule-ximUpgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade firefox-libcairo2Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-toolsUpgrade libsoftokn3Upgrade firefox-gtk3-langUpgrade firefox-libffi4Upgrade MozillaFirefox-translations-commonUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-glib2-toolsUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefoxUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libpango-1_0-0Upgrade enigmailUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-atk-langUpgrade libfreebl3-32bitUpgrade mozilla-nss-certsUpgrade firefox-libcairo-gobject2Upgrade mozilla-nssUpgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk3-immodule-thaiUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nspr-32bitUpgrade mozillafirefox-branding-sleUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-toolsUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaFirefox-develUpgrade firefox-libffi7Upgrade MozillaThunderbirdUpgrade firefox-glib2-langUpgrade libfreebl3Upgrade firefox-libharfbuzz0Upgrade firefox-libgtk-3-0Upgrade mozilla-nsprUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodules-tigrigna | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade libnss3Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub