Lucene search
F5F5:K41738501HistoryOct 26, 2018 - 12:00 a.m.
K41738501 : Mozilla NSS vulnerability CVE-2018-12384
2018-10-2600:00:00
my.f5.com
16
Security Advisory Description
When handling a SSLv2-compatible ClientHello request, the server doesn’t generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3. (CVE-2018-12384)
Impact
Traffix SDC
An attacker may exploit this vulnerability in a passive replay attack and obtain sensitive information.
BIG-IP, BIG-IQ, F5 iWorkflow, and Enterprise Manager
There is no impact; these F5 products are not affected by this vulnerability.
Related
nessus
nessus
Fedora 28 : nspr / nss / nss-softokn / nss-util (2018-1a7a5c54c2)
2019-01-03 00:00:00
NewStart CGSL MAIN 4.05 : nss Vulnerability (NS-SA-2019-0131)
2019-08-12 00:00:00
EulerOS 2.0 SP2 : nss (EulerOS-SA-2018-1358)
2018-11-06 00:00:00
ubuntucve
ubuntucve
CVE-2018-12384
2018-09-04 00:00:00
openvas
openvas
CentOS Update for nss CESA-2018:2898 centos6
2018-10-10 00:00:00
Fedora Update for nss-softokn FEDORA-2018-4a21a8ca59
2018-09-19 00:00:00
Fedora Update for nss-util FEDORA-2018-1a7a5c54c2
2018-09-15 00:00:00
prion
prion
Design/Logic Flaw
2019-04-29 15:29:00
alpinelinux
alpinelinux
CVE-2018-12384
2019-04-29 15:29:00
ibm
ibm
Security Bulletin: This Power System update is being released to address CVE-2018-12384
2021-12-07 19:14:45
Security Bulletin: A vulnerability in NSS affects PowerKVM
2018-12-17 14:25:02
fedora
fedora
[SECURITY] Fedora 27 Update: nss-softokn-3.39.0-1.0.fc27
2018-09-18 07:52:53
[SECURITY] Fedora 29 Update: nss-util-3.39.0-2.fc29
2018-09-21 05:42:27
[SECURITY] Fedora 27 Update: nss-3.39.0-1.0.fc27
2018-09-18 07:52:53
mageia
mageia
Updated firefox packages fix security vulnerability
2018-10-01 11:44:39
redhatcve
redhatcve
CVE-2018-12384
2019-10-09 22:23:49
oraclelinux
oraclelinux
nss security update
2018-09-25 00:00:00
nss security update
2018-10-09 00:00:00
cve
cve
CVE-2018-12384
2019-04-29 15:29:00
debiancve
debiancve
CVE-2018-12384
2019-04-29 15:29:00
redhat
redhat
(RHSA-2018:2768) Moderate: nss security update
2018-09-25 17:31:15
(RHSA-2018:2898) Moderate: nss security update
2018-10-09 14:49:24
osv
osv
CVE-2018-12384
2019-04-29 15:29:00
nvd
nvd
CVE-2018-12384
2019-04-29 15:29:00
amazon
amazon
Medium: nss
2018-10-23 18:41:00
Medium: nss
2018-10-24 16:35:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:26:13
cvelist
cvelist
CVE-2018-12384
2019-04-29 14:22:53
centos
centos
nss security update
2018-10-09 20:22:27
nss security update
2018-09-28 16:44:15
suse
suse
Security update for mozilla-nss (moderate)
2018-12-13 12:16:00
Security update for mozilla-nspr and mozilla-nss (moderate)
2018-12-28 21:12:25
ubuntu
ubuntu
NSS vulnerabilities
2019-02-18 00:00:00
NSS vulnerabilities
2019-01-09 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0239
2019-06-17 00:00:00
Important Photon OS Security Update - PHSA-2019-0172
2019-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00