Lucene search

K
f5F5F5:K13290208
HistoryApr 16, 2021 - 12:00 a.m.

K13290208 : NSS vulnerability CVE-2020-12403

2021-04-1600:00:00
my.f5.com
18

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.1%

Security Advisory Description

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability. (CVE-2020-12403)

Impact

The highest threat from this vulnerability is to confidentiality and system availability.