Medium: nss-softokn

2023-10-1215:48:00

alas.aws.amazon.com

cve-2023-4421

red hat

mitre

unix

yum update

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

18.1%

JSON

Issue Overview:

new tlsfuzzer code can still detect timing issues in RSA operations (CVE-2023-4421)

Affected Packages:

nss-softokn

Issue Correction:
Run yum update nss-softokn to update your system.

New Packages:

i686:  
    nss-softokn-3.53.1-6.48.amzn1.i686  
    nss-softokn-freebl-devel-3.53.1-6.48.amzn1.i686  
    nss-softokn-debuginfo-3.53.1-6.48.amzn1.i686  
    nss-softokn-devel-3.53.1-6.48.amzn1.i686  
    nss-softokn-freebl-3.53.1-6.48.amzn1.i686  
  
src:  
    nss-softokn-3.53.1-6.48.amzn1.src  
  
x86_64:  
    nss-softokn-3.53.1-6.48.amzn1.x86_64  
    nss-softokn-devel-3.53.1-6.48.amzn1.x86_64  
    nss-softokn-freebl-devel-3.53.1-6.48.amzn1.x86_64  
    nss-softokn-debuginfo-3.53.1-6.48.amzn1.x86_64  
    nss-softokn-freebl-3.53.1-6.48.amzn1.x86_64

Additional References

Red Hat: CVE-2023-4421

Mitre: CVE-2023-4421

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686nss-softokn< 3.53.1-6.48.amzn1nss-softokn-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux1i686nss-softokn-freebl-devel< 3.53.1-6.48.amzn1nss-softokn-freebl-devel-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux1i686nss-softokn-debuginfo< 3.53.1-6.48.amzn1nss-softokn-debuginfo-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux1i686nss-softokn-devel< 3.53.1-6.48.amzn1nss-softokn-devel-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux1i686nss-softokn-freebl< 3.53.1-6.48.amzn1nss-softokn-freebl-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux1x86_64nss-softokn< 3.53.1-6.48.amzn1nss-softokn-3.53.1-6.48.amzn1.x86_64.rpm
Amazon Linux1x86_64nss-softokn-devel< 3.53.1-6.48.amzn1nss-softokn-devel-3.53.1-6.48.amzn1.x86_64.rpm
Amazon Linux1x86_64nss-softokn-freebl-devel< 3.53.1-6.48.amzn1nss-softokn-freebl-devel-3.53.1-6.48.amzn1.x86_64.rpm
Amazon Linux1x86_64nss-softokn-debuginfo< 3.53.1-6.48.amzn1nss-softokn-debuginfo-3.53.1-6.48.amzn1.x86_64.rpm
Amazon Linux1x86_64nss-softokn-freebl< 3.53.1-6.48.amzn1nss-softokn-freebl-3.53.1-6.48.amzn1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Amazon Linux	1	i686	nss-softokn	< 3.53.1-6.48.amzn1	nss-softokn-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux	1	i686	nss-softokn-freebl-devel	< 3.53.1-6.48.amzn1	nss-softokn-freebl-devel-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux	1	i686	nss-softokn-debuginfo	< 3.53.1-6.48.amzn1	nss-softokn-debuginfo-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux	1	i686	nss-softokn-devel	< 3.53.1-6.48.amzn1	nss-softokn-devel-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux	1	i686	nss-softokn-freebl	< 3.53.1-6.48.amzn1	nss-softokn-freebl-3.53.1-6.48.amzn1.i686.rpm
Amazon Linux	1	x86_64	nss-softokn	< 3.53.1-6.48.amzn1	nss-softokn-3.53.1-6.48.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	nss-softokn-devel	< 3.53.1-6.48.amzn1	nss-softokn-devel-3.53.1-6.48.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	nss-softokn-freebl-devel	< 3.53.1-6.48.amzn1	nss-softokn-freebl-devel-3.53.1-6.48.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	nss-softokn-debuginfo	< 3.53.1-6.48.amzn1	nss-softokn-debuginfo-3.53.1-6.48.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	nss-softokn-freebl	< 3.53.1-6.48.amzn1	nss-softokn-freebl-3.53.1-6.48.amzn1.x86_64.rpm