Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:1026
HistoryMar 30, 2021 - 7:24 a.m.

(RHSA-2021:1026) Moderate: nss-softokn security update

2021-03-3007:24:03
access.redhat.com
62
nss-softokn
security update
use-after-free
cryptographic primitives
chacha20-poly1305
cve-2019-11756
cve-2019-17006
cve-2020-12403

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.6%

JSON

The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

Security Fix(es):

  • nss: Use-after-free in sftk_FreeSession due to improper refcounting (CVE-2019-11756)

  • nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)

  • nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read (CVE-2020-12403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7i686nss-softokn-debuginfo< 3.44.0-9.el7_7nss-softokn-debuginfo-3.44.0-9.el7_7.i686.rpm
RedHat7ppc64lenss-softokn-debuginfo< 3.44.0-9.el7_7nss-softokn-debuginfo-3.44.0-9.el7_7.ppc64le.rpm
RedHat7ppcnss-softokn< 3.44.0-9.el7_7nss-softokn-3.44.0-9.el7_7.ppc.rpm
RedHat7x86_64nss-softokn-freebl-devel< 3.44.0-9.el7_7nss-softokn-freebl-devel-3.44.0-9.el7_7.x86_64.rpm
RedHat7x86_64nss-softokn-debuginfo< 3.44.0-9.el7_7nss-softokn-debuginfo-3.44.0-9.el7_7.x86_64.rpm
RedHat7ppc64lenss-softokn-devel< 3.44.0-9.el7_7nss-softokn-devel-3.44.0-9.el7_7.ppc64le.rpm
RedHat7i686nss-softokn-devel< 3.44.0-9.el7_7nss-softokn-devel-3.44.0-9.el7_7.i686.rpm
RedHat7ppcnss-softokn-devel< 3.44.0-9.el7_7nss-softokn-devel-3.44.0-9.el7_7.ppc.rpm
RedHat7ppc64nss-softokn-devel< 3.44.0-9.el7_7nss-softokn-devel-3.44.0-9.el7_7.ppc64.rpm
RedHat7ppc64nss-softokn-debuginfo< 3.44.0-9.el7_7nss-softokn-debuginfo-3.44.0-9.el7_7.ppc64.rpm
Rows per page:
1-10 of 351

Related

nessus 63
redhat 14
ibm 7
almalinux 2
oraclelinux 3
rocky 2
nvd 3
openvas 33
cvelist 3
debiancve 3
osv 9
ubuntucve 3
ubuntu 4
cve 3
redhatcve 3
symantec 1
debian 4
veracode 2
prion 3
cbl_mariner 2
f5 1
amazon 2
alpinelinux 1
centos 1
suse 2
photon 6
gentoo 1
rosalinux 1
ics 1
mageia 1
archlinux 1
mozilla 1
kaspersky 1
nessus
nessus
RHEL 7 : nss-softokn (RHSA-2021:0758)
2021-03-09 00:00:00
RHEL 7 : nss-softokn (RHSA-2021:1026)
2021-04-21 00:00:00
RHEL 7 : nss and nss-softokn (RHSA-2021:0876)
2021-03-17 00:00:00
redhat
redhat
(RHSA-2021:0758) Moderate: nss-softokn security update
2021-03-09 08:47:28
(RHSA-2021:0876) Moderate: nss and nss-softokn security update
2021-03-16 13:07:08
(RHSA-2020:3280) Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
ibm
ibm
Security Bulletin: IBM MQ Appliance is affected by multiple nss and nspr vulnerabilities
2021-01-21 09:32:12
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-17006, CVE-2019-17023, CVE-2020-12403)
2021-07-08 17:59:28
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities
2021-01-12 10:59:54
almalinux
almalinux
Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
Moderate: nss security and bug fix update
2021-02-16 07:32:47
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2020-08-04 00:00:00
nss and nspr security, bug fix, and enhancement update
2020-10-08 00:00:00
nss security and bug fix update
2021-02-17 00:00:00
rocky
rocky
nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
nss security and bug fix update
2021-02-16 07:32:47
nvd
nvd
CVE-2019-11756
2020-01-08 20:15:12
CVE-2020-12403
2021-05-27 19:15:07
CVE-2019-17006
2020-10-22 21:15:12
openvas
openvas
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2022-2203)
2022-08-01 00:00:00
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2022-1847)
2022-06-16 00:00:00
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2022-1871)
2022-06-16 00:00:00
cvelist
cvelist
CVE-2019-11756
2020-01-08 19:23:29
CVE-2019-17006
2020-10-22 20:24:25
CVE-2020-12403
2021-05-27 00:00:00
debiancve
debiancve
CVE-2019-11756
2020-01-08 20:15:12
CVE-2019-17006
2020-10-22 21:15:12
CVE-2020-12403
2021-05-27 19:15:07
osv
osv
nss - security update
2020-01-06 00:00:00
Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
CVE-2020-12403
2021-05-27 19:15:07
ubuntucve
ubuntucve
CVE-2019-17006
2019-12-31 00:00:00
CVE-2019-11756
2019-12-04 00:00:00
CVE-2020-12403
2020-08-18 00:00:00
ubuntu
ubuntu
NSS vulnerability
2020-01-08 00:00:00
NSS vulnerability
2020-08-27 00:00:00
Firefox vulnerabilities
2019-12-09 00:00:00
cve
cve
CVE-2019-17006
2020-10-22 21:15:12
CVE-2019-11756
2020-01-08 20:15:12
CVE-2020-12403
2021-05-27 19:15:07
redhatcve
redhatcve
CVE-2019-17006
2019-12-26 06:08:47
CVE-2019-11756
2019-12-10 03:17:56
CVE-2020-12403
2020-08-14 13:13:30
symantec
symantec
Mozilla Network Security Services CVE-2019-17006 Heap Buffer Overflow Vulnerability
2019-12-26 00:00:00
debian
debian
[SECURITY] [DLA 2058-1] nss security update
2020-01-06 23:25:44
[SECURITY] [DSA 4726-1] nss security update
2020-07-17 18:06:14
[SECURITY] [DLA 2388-1] nss security update
2020-09-29 19:15:28
veracode
veracode
Denial Of Service (DoS)
2020-08-04 02:02:53
Denial Of Service (DoS)
2020-08-06 21:32:12
prion
prion
Heap overflow
2021-05-27 19:15:00
Input validation
2020-01-08 20:15:00
Buffer overflow
2020-10-22 21:15:00
cbl_mariner
cbl_mariner
CVE-2020-12403 affecting package nss for versions less than 3.44-10
2022-04-09 06:52:33
CVE-2020-12403 affecting package nss 3.44-6
2021-06-14 21:14:09
f5
f5
K13290208 : NSS vulnerability CVE-2020-12403
2021-04-16 00:00:00
amazon
amazon
Medium: nspr, nss-softokn, nss-util
2021-07-08 18:41:00
Medium: nspr, nss-softokn, nss-util, nss
2020-11-09 21:02:00
alpinelinux
alpinelinux
CVE-2020-12403
2021-05-27 19:15:07
centos
centos
nspr, nss security update
2020-11-06 22:01:52
suse
suse
Security update for mozilla-nspr, mozilla-nss (important)
2020-06-24 00:00:00
Security update for mozilla-nspr, mozilla-nss (moderate)
2020-01-12 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0474
2022-10-21 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0404
2021-06-17 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0358
2021-06-16 00:00:00
gentoo
gentoo
Mozilla Network Security Service (NSS): Multiple vulnerabilities
2020-08-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2223
2023-08-29 12:02:20
ics
ics
Siemens RUGGEDCOM ROX II
2021-02-09 12:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2020-08-18 20:41:27
archlinux
archlinux
[ASA-201912-1] firefox: multiple issues
2019-12-03 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in - Firefox 71 — Mozilla
2019-12-03 00:00:00
kaspersky
kaspersky
KLA11611 Multiple vulnerabilities in Mozilla Firefox
2019-12-03 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.6%

JSON
Related for RHSA-2021:1026
nessus63redhat14ibm7almalinux2oraclelinux3rocky2nvd3openvas33cvelist3debiancve3osv9ubuntucve3ubuntu4cve3redhatcve3symantec1debian4veracode2prion3cbl_mariner2f51amazon2alpinelinux1centos1suse2photon6gentoo1rosalinux1ics1mageia1archlinux1mozilla1kaspersky1