A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-freebl-develUpgrade nspr-debuginfoUpgrade nss-pkcs11-develUpgrade nss-util-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-debuginfoUpgrade nsprUpgrade nss-utilUpgrade nss-sysinitUpgrade nss-softokn-develUpgrade nss-toolsUpgrade nss-develUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-util-develUpgrade nspr-develUpgrade nss-softokn | Nov 12, 2020 | Jul 23, 2019 |
| Amazon_linux | — | Upgrade nss-softoknUpgrade nss-utilUpgrade nspr | Jul 13, 2021 | Jul 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Centos_linux | — | Upgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nss-tools-debuginfoUpgrade nss-softokn-freeblUpgrade nss-debuginfoUpgrade nspr-debugsourceUpgrade nss-debugsourceUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nspr-develUpgrade nsprUpgrade nspr-debuginfoUpgrade nss-develUpgrade nss-util-debuginfoUpgrade nss-pkcs11-develUpgrade nss-softokn-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nssUpgrade nss-utilUpgrade nss-softokn-freebl-devel | Aug 28, 2019 | Jul 23, 2019 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefox-esrUpgrade waterfoxUpgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade libxul | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.45-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jul 23, 2019 |
| Oracle_linux | — | Upgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nss-util-develUpgrade nss-sysinitUpgrade nsprUpgrade nss-softoknUpgrade nss-toolsUpgrade nssUpgrade nspr-develUpgrade nss-softokn-devel | Oct 9, 2020 | Jul 9, 2019 |
| Redhat_linux | — | Upgrade nspr-develUpgrade nss-debuginfoNo solution existsUpgrade nssUpgrade nss-util-develUpgrade nss-toolsUpgrade nspr-debugsourceUpgrade nss-sysinitUpgrade nss-tools-debuginfoUpgrade nss-softoknUpgrade nss-util-debuginfoUpgrade nss-utilUpgrade nsprUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-debugsourceUpgrade nss-softokn-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-freeblUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfo | Jul 31, 2019 | Jul 23, 2019 |
| Suse | — | Upgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libgtk-3-0Upgrade mozilla-nssUpgrade mozillathunderbird-translations-otherUpgrade mozillafirefox-translations-commonUpgrade mozilla-nsprUpgrade mozilla-nspr-32bitUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade libfreebl3Upgrade mozillafirefox-branding-sleUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-multipressUpgrade mozillafirefox-branding-sledUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozillafirefox-branding-upstreamUpgrade firefox-gio-branding-upstreamUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-toolsUpgrade libfirefox-gio-2_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-libharfbuzz0Upgrade mozilla-nss-develUpgrade mozillathunderbirdUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-dataUpgrade enigmailUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozillafirefoxUpgrade firefox-gtk3-immodule-ximUpgrade mozillafirefox-develUpgrade firefox-glib2-toolsUpgrade mozillathunderbird-translations-commonUpgrade libsoftokn3Upgrade firefox-libffi4Upgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade firefox-libatk-1_0-0Upgrade mozillafirefox-translations-otherUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-langUpgrade libsoftokn3-32bitUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-glib-2_0-0Upgrade mozillafirefox-buildsymbolsUpgrade firefox-libcairo2 | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub