A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade nsprUpgrade nss-softokn-develUpgrade nss-utilUpgrade nss-toolsUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nssUpgrade nss-develUpgrade nspr-develUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-devel | Nov 12, 2020 | Jul 23, 2019 |
| Amazon_linux | — | Upgrade nss-softoknUpgrade nss-utilUpgrade nspr | Jul 13, 2021 | Jul 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Centos_linux | — | Upgrade nss-softokn-freebl-debuginfoUpgrade nspr-debugsourceUpgrade nss-tools-debuginfoUpgrade nsprUpgrade nss-util-develUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-debuginfoUpgrade nss-debugsourceUpgrade nss-sysinitUpgrade nss-toolsUpgrade nspr-develUpgrade nss-softokn-develUpgrade nss-sysinit-debuginfoUpgrade nss-pkcs11-develUpgrade nss-util-debuginfoUpgrade nss-softokn-debuginfoUpgrade nssUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-util | Aug 28, 2019 | Jul 23, 2019 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade firefox-esrUpgrade linux-firefoxUpgrade waterfoxUpgrade linux-thunderbirdUpgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.45-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jul 23, 2019 |
| Oracle_linux | — | Upgrade nss-softokn-freeblUpgrade nss-sysinitUpgrade nss-util-develUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nsprUpgrade nspr-develUpgrade nss-toolsUpgrade nssUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nss-util | Oct 9, 2020 | Jul 9, 2019 |
| Redhat_linux | — | Upgrade nss-tools-debuginfoUpgrade nss-debuginfoUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-softoknUpgrade nspr-develNo solution existsUpgrade nspr-debugsourceUpgrade nss-util-develUpgrade nssUpgrade nss-util-debuginfoUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-develUpgrade nss-debugsourceUpgrade nspr-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-debuginfoUpgrade nsprUpgrade nss-develUpgrade nss-softokn-freebl | Jul 31, 2019 | Jul 23, 2019 |
| Suse | — | Upgrade enigmailUpgrade firefox-gtk3-dataUpgrade libsoftokn3Upgrade firefox-libffi4Upgrade firefox-gtk3-immodule-ximUpgrade firefox-libpango-1_0-0Upgrade mozillathunderbirdUpgrade libsoftokn3-32bitUpgrade firefox-libcairo2Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-langUpgrade mozillathunderbird-translations-commonUpgrade mozilla-nspr-develUpgrade mozillafirefox-buildsymbolsUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozillafirefox-develUpgrade mozillafirefoxUpgrade mozilla-nss-develUpgrade firefox-glib2-toolsUpgrade mozillafirefox-translations-otherUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nss-toolsUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3Upgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libharfbuzz0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libffi7Upgrade MozillaThunderbird-buildsymbolsUpgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-immodule-thaiUpgrade mozillafirefox-branding-sledUpgrade mozilla-nssUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libcairo-gobject2Upgrade firefox-gio-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nsprUpgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-multipressUpgrade mozillafirefox-branding-sleUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozillafirefox-branding-upstreamUpgrade firefox-glib2-langUpgrade firefox-gdk-pixbuf-langUpgrade mozillathunderbird-translations-otherUpgrade firefox-atk-langUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-tools | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub