Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:1461
HistoryApr 14, 2020 - 2:33 p.m.

(RHSA-2020:1461) Important: nss-softokn security update

2020-04-1414:33:58
access.redhat.com
73

0.003 Low

EPSS

Percentile

71.1%

JSON

The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

Security Fix(es):

  • nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate (CVE-2019-11745)

  • ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries (CVE-2018-0495)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7s390nss-softokn-freebl< 3.36.0-6.el7_6nss-softokn-freebl-3.36.0-6.el7_6.s390.rpm
RedHat7i686nss-softokn-freebl< 3.36.0-6.el7_6nss-softokn-freebl-3.36.0-6.el7_6.i686.rpm
RedHat7x86_64nss-softokn< 3.36.0-6.el7_6nss-softokn-3.36.0-6.el7_6.x86_64.rpm
RedHat7s390xnss-softokn-debuginfo< 3.36.0-6.el7_6nss-softokn-debuginfo-3.36.0-6.el7_6.s390x.rpm
RedHat7i686nss-softokn-devel< 3.36.0-6.el7_6nss-softokn-devel-3.36.0-6.el7_6.i686.rpm
RedHat7aarch64nss-softokn-freebl-devel< 3.36.0-6.el7_6nss-softokn-freebl-devel-3.36.0-6.el7_6.aarch64.rpm
RedHat7ppc64nss-softokn-devel< 3.36.0-6.el7_6nss-softokn-devel-3.36.0-6.el7_6.ppc64.rpm
RedHat7s390nss-softokn-freebl-devel< 3.36.0-6.el7_6nss-softokn-freebl-devel-3.36.0-6.el7_6.s390.rpm
RedHat7ppc64nss-softokn-freebl-devel< 3.36.0-6.el7_6nss-softokn-freebl-devel-3.36.0-6.el7_6.ppc64.rpm
RedHat7s390nss-softokn< 3.36.0-6.el7_6nss-softokn-3.36.0-6.el7_6.s390.rpm
Rows per page:
1-10 of 401

Related

nessus 68
redhat 10
amazon 7
ubuntu 8
openvas 38
osv 6
ubuntucve 2
oraclelinux 4
redhatcve 3
debiancve 2
veracode 2
alpinelinux 2
nvd 2
ibm 9
prion 2
debian 5
mageia 4
centos 3
cvelist 2
cve 2
cloudfoundry 2
fedora 5
slackware 1
freebsd 1
archlinux 1
f5 1
suse 3
photon 4
nessus
nessus
RHEL 7 : nss-softokn (RHSA-2020:1345)
2020-04-07 00:00:00
RHEL 7 : nss-softokn (RHSA-2020:1461)
2020-04-14 00:00:00
RHEL 7 : nss-softokn (RHSA-2020:1267)
2020-04-01 00:00:00
redhat
redhat
(RHSA-2020:1345) Important: nss-softokn security update
2020-04-07 08:30:50
(RHSA-2020:1267) Important: nss-softokn security update
2020-04-01 07:33:21
(RHSA-2019:4152) Important: nss-softokn security update
2019-12-10 10:02:18
amazon
amazon
Important: nss, nss-softokn, nss-util, nspr
2020-03-16 21:29:00
Important: nss
2020-01-14 20:03:00
Important: nss-util
2024-02-15 03:52:00
ubuntu
ubuntu
NSS vulnerability
2019-11-27 00:00:00
NSS vulnerability
2019-11-27 00:00:00
Libgcrypt vulnerability
2018-06-19 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4203-2)
2022-08-26 00:00:00
CentOS Update for nss-softokn CESA-2019:4152 centos6
2019-12-12 00:00:00
Mageia: Security Advisory (MGASA-2019-0374)
2022-01-28 00:00:00
osv
osv
CVE-2019-11745
2020-01-08 20:15:12
nss - security update
2019-11-25 00:00:00
libgcrypt20 - security update
2018-06-29 00:00:00
ubuntucve
ubuntucve
CVE-2019-11745
2019-11-25 00:00:00
CVE-2018-0495
2018-06-13 00:00:00
oraclelinux
oraclelinux
nss security update
2019-12-09 00:00:00
nss-softokn security update
2019-12-11 00:00:00
nss, nss-softokn, nss-util security update
2019-12-11 00:00:00
redhatcve
redhatcve
CVE-2019-11745
2020-04-06 17:07:36
CVE-2018-0495
2018-06-14 08:19:05
CVE-2018-12437
2018-06-15 18:20:03
debiancve
debiancve
CVE-2019-11745
2020-01-08 20:15:12
CVE-2018-0495
2018-06-13 23:29:00
veracode
veracode
Denial Of Service (DoS)
2019-12-10 00:18:20
Side-channel Attack
2019-06-03 00:25:00
alpinelinux
alpinelinux
CVE-2019-11745
2020-01-08 20:15:12
CVE-2018-0495
2018-06-13 23:29:00
nvd
nvd
CVE-2019-11745
2020-01-08 20:15:12
CVE-2018-0495
2018-06-13 23:29:00
ibm
ibm
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-11745)
2021-01-12 20:25:53
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities
2020-08-31 14:28:37
Security Bulletin: IBM MQ Appliance is affected by Network Security Services (NSS) vulnerabilities (CVE-2019-11729 and CVE-2019-11745)
2020-06-08 11:24:01
prion
prion
Design/Logic Flaw
2020-01-08 20:15:00
Memory corruption
2018-06-13 23:29:00
debian
debian
[SECURITY] [DLA 2008-1] nss security update
2019-11-25 23:15:08
[SECURITY] [DSA 4231-1] libgcrypt20 security update
2018-06-17 18:53:17
[SECURITY] [DSA 4231-1] libgcrypt20 security update
2018-06-17 18:53:17
mageia
mageia
Updated nss packages fix security vulnerability
2019-12-08 21:12:18
Updated libgcrypt packages fix security vulnerability
2018-07-01 20:17:14
Updated libcrypt packages fix a security vulnerability
2018-07-02 01:17:47
centos
centos
nss security update
2019-12-11 17:44:29
nss security update
2019-12-24 15:55:26
nspr, nss security update
2019-08-30 03:43:23
cvelist
cvelist
CVE-2019-11745
2020-01-08 19:22:00
CVE-2018-0495
2018-06-13 23:00:00
cve
cve
CVE-2019-11745
2020-01-08 20:15:12
CVE-2018-0495
2018-06-13 23:29:00
cloudfoundry
cloudfoundry
USN-3689-1: Libgcrypt vulnerability | Cloud Foundry
2018-07-10 00:00:00
USN-3692-1: OpenSSL vulnerabilities | Cloud Foundry
2018-07-10 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: libgcrypt-1.8.3-1.fc27
2018-06-17 19:45:43
[SECURITY] Fedora 28 Update: libgcrypt-1.8.3-1.fc28
2018-06-18 16:20:42
[SECURITY] Fedora 27 Update: botan2-2.7.0-1.fc27
2018-07-11 19:32:47
slackware
slackware
[slackware-security] libgcrypt
2018-06-13 22:09:13
freebsd
freebsd
libgcrypt -- side-channel attack vulnerability
2018-06-13 00:00:00
archlinux
archlinux
[ASA-201806-10] libgcrypt: private key recovery
2018-06-16 00:00:00
f5
f5
K20001553 : Libgcrypt vulnerability CVE-2018-0495
2018-09-28 00:00:00
suse
suse
Security update for libgcrypt (moderate)
2018-07-28 16:00:35
Security update for libgcrypt (moderate)
2018-08-03 21:07:44
Security update for mozilla-nspr and mozilla-nss (moderate)
2018-12-28 21:12:25
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0182
2018-09-05 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0091
2018-09-06 00:00:00
Critical Photon OS Security Update - PHSA-2018-0182
2018-09-05 00:00:00

0.003 Low

EPSS

Percentile

71.1%

JSON
Related for RHSA-2020:1461
nessus68redhat10amazon7ubuntu8openvas38osv6ubuntucve2oraclelinux4redhatcve3debiancve2veracode2alpinelinux2nvd2ibm9prion2debian5mageia4centos3cvelist2cve2cloudfoundry2fedora5slackware1freebsd1archlinux1f51suse3photon4