A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade nssUpgrade nss-debuginfoUpgrade nspr-develUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nsprUpgrade nspr-debuginfoUpgrade nss-util-debuginfoUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nss-softokn-debuginfo | Nov 12, 2020 | Jul 23, 2019 |
| Amazon_linux | — | Upgrade nsprUpgrade nss-utilUpgrade nss-softokn | Jul 13, 2021 | Jul 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Centos_linux | — | Upgrade nss-softokn-debuginfoUpgrade nss-develUpgrade nss-sysinit-debuginfoUpgrade nss-utilUpgrade nspr-debuginfoUpgrade nssUpgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nss-util-debuginfoUpgrade nss-tools-debuginfoUpgrade nspr-develUpgrade nsprUpgrade nss-softokn-freebl-debuginfoUpgrade nspr-debugsourceUpgrade nss-softoknUpgrade nss-debugsourceUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-softokn-freebl | Aug 28, 2019 | Jul 23, 2019 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Jul 23, 2019 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade libxulUpgrade linux-thunderbirdUpgrade firefox-esrUpgrade waterfoxUpgrade linux-seamonkeyUpgrade linux-firefox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.45-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jul 23, 2019 |
| Oracle_linux | — | Upgrade nss-develUpgrade nss-utilUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nsprUpgrade nssUpgrade nspr-develUpgrade nss-util-develUpgrade nss-toolsUpgrade nss-softokn-freebl | Oct 9, 2020 | Jul 9, 2019 |
| Redhat_linux | — | Upgrade nss-sysinitUpgrade nspr-debugsourceUpgrade nss-util-develNo solution existsUpgrade nss-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-softoknUpgrade nssUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nspr-develUpgrade nss-sysinit-debuginfoUpgrade nss-pkcs11-develUpgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade nss-debugsourceUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-devel | Jul 31, 2019 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-certs-32bitUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade MozillaThunderbird-translations-commonUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade MozillaFirefox-translations-commonUpgrade firefox-libffi4Upgrade libsoftokn3Upgrade libfirefox-gthread-2_0-0Upgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefoxUpgrade firefox-libpango-1_0-0Upgrade firefox-glib2-toolsUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-dataUpgrade enigmailUpgrade firefox-gtk3-langUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade firefox-libcairo2Upgrade mozillafirefox-buildsymbolsUpgrade firefox-libatk-1_0-0Upgrade firefox-libcairo-gobject2Upgrade libfirefox-gobject-2_0-0Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade firefox-atk-langUpgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk3-immodule-thaiUpgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade firefox-libharfbuzz0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-langUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nsprUpgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaThunderbirdUpgrade firefox-gtk3-branding-upstreamUpgrade MozillaFirefox-develUpgrade libfirefox-gio-2_0-0Upgrade MozillaThunderbird-buildsymbolsUpgrade firefox-gtk3-toolsUpgrade firefox-libffi7Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nss-certsUpgrade mozillafirefox-branding-sle | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub