A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nss-sysinitUpgrade nss-develUpgrade nss-util-develUpgrade nss-softokn-freeblUpgrade nsprUpgrade nspr-develUpgrade nss-debuginfoUpgrade nssUpgrade nss-utilUpgrade nss-softokn-develUpgrade nss-toolsUpgrade nss-softokn | Nov 12, 2020 | Jul 23, 2019 |
| Amazon_linux | — | Upgrade nsprUpgrade nss-utilUpgrade nss-softokn | Jul 13, 2021 | Jul 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Centos_linux | — | Upgrade nsprUpgrade nss-softoknUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-develUpgrade nss-debugsourceUpgrade nss-sysinitUpgrade nss-tools-debuginfoUpgrade nspr-develUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nspr-debugsourceUpgrade nss-softokn-freeblUpgrade nssUpgrade nss-sysinit-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nss-util-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-utilUpgrade nss-devel | Aug 28, 2019 | Jul 23, 2019 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Jul 23, 2019 |
| Freebsd | — | Upgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade thunderbirdUpgrade linux-firefoxUpgrade firefox-esrUpgrade waterfoxUpgrade linux-thunderbirdUpgrade linux-seamonkey | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/security/nss to version 4.45-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jul 23, 2019 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-softokn-develUpgrade nspr-develUpgrade nss-softoknUpgrade nsprUpgrade nss-softokn-freeblUpgrade nss | Oct 9, 2020 | Jul 9, 2019 |
| Redhat_linux | — | Upgrade nss-sysinitUpgrade nss-util-develNo solution existsUpgrade nss-debuginfoUpgrade nss-util-debuginfoUpgrade nspr-debugsourceUpgrade nss-toolsUpgrade nspr-develUpgrade nss-tools-debuginfoUpgrade nss-softoknUpgrade nssUpgrade nspr-debuginfoUpgrade nss-develUpgrade nss-softokn-develUpgrade nss-utilUpgrade nss-debugsourceUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-freebl | Jul 31, 2019 | Jul 23, 2019 |
| Suse | — | Upgrade libfirefox-gthread-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade MozillaFirefoxUpgrade firefox-libatk-1_0-0Upgrade libsoftokn3-32bitUpgrade mozilla-nss-32bitUpgrade MozillaThunderbird-translations-commonUpgrade firefox-libcairo2Upgrade firefox-gtk3-dataUpgrade MozillaThunderbird-translations-otherUpgrade firefox-glib2-toolsUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-glib-2_0-0Upgrade firefox-libffi4Upgrade MozillaFirefox-translations-otherUpgrade enigmailUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nspr-develUpgrade mozillafirefox-buildsymbolsUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-develUpgrade libsoftokn3Upgrade mozilla-nss-toolsUpgrade firefox-atk-langUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-libgtk-3-0Upgrade mozilla-nsprUpgrade MozillaFirefox-develUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-libharfbuzz0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gio-branding-upstreamUpgrade firefox-glib2-langUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libffi7Upgrade mozillafirefox-branding-sleUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade libfreebl3Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gio-2_0-0Upgrade MozillaThunderbirdUpgrade mozilla-nss | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub