A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nspr-debuginfoUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nss-util-develUpgrade nss-softokn-develUpgrade nss-utilUpgrade nsprUpgrade nss-sysinitUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nss-develUpgrade nssUpgrade nss-debuginfoUpgrade nss-tools | Nov 12, 2020 | Jul 23, 2019 |
| Amazon_linux | — | Upgrade nss-utilUpgrade nss-softoknUpgrade nspr | Jul 13, 2021 | Jul 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Centos_linux | — | Upgrade nss-util-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softoknUpgrade nss-tools-debuginfoUpgrade nspr-debugsourceUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-sysinitUpgrade nss-toolsUpgrade nspr-develUpgrade nss-debugsourceUpgrade nss-softokn-develUpgrade nss-debuginfoUpgrade nspr-debuginfoUpgrade nss-utilUpgrade nss-util-debuginfoUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-softokn-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss | Aug 28, 2019 | Jul 23, 2019 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade waterfoxUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade linux-firefoxUpgrade libxulUpgrade seamonkeyUpgrade firefoxUpgrade thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.45-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jul 23, 2019 |
| Oracle_linux | — | Upgrade nss-utilUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nssUpgrade nss-toolsUpgrade nss-softokn-develUpgrade nspr-develUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-util-develUpgrade nss-sysinit | Oct 9, 2020 | Jul 9, 2019 |
| Redhat_linux | — | Upgrade nss-util-develNo solution existsUpgrade nss-debuginfoUpgrade nspr-develUpgrade nssUpgrade nss-tools-debuginfoUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nspr-debugsourceUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-debugsourceUpgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nspr-debuginfo | Jul 31, 2019 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade mozillathunderbird-translations-commonUpgrade mozillathunderbirdUpgrade firefox-gtk3-dataUpgrade mozillafirefoxUpgrade mozillafirefox-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-glib-2_0-0Upgrade libsoftokn3Upgrade firefox-gtk3-langUpgrade mozillafirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nspr-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libcairo2Upgrade firefox-libpango-1_0-0Upgrade firefox-glib2-toolsUpgrade enigmailUpgrade libsoftokn3-32bitUpgrade firefox-libffi4Upgrade mozilla-nss-32bitUpgrade mozilla-nss-develUpgrade mozilla-nspr-32bitUpgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nsprUpgrade firefox-libgtk-3-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-libharfbuzz0Upgrade mozillafirefox-branding-sleUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-inuktitutUpgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-gobject-2_0-0Upgrade mozillafirefox-branding-sledUpgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade mozilla-nss-certsUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-gio-branding-upstreamUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade firefox-gdk-pixbuf-langUpgrade libfreebl3Upgrade firefox-libffi7Upgrade mozillathunderbird-translations-otherUpgrade firefox-gtk3-immodule-multipress | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade libnss3Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub