Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | nss | 2:3.26.2-1.1+deb9u2 |
Vulnerabilities 13
-
Unscored —CVE-2018-12404 EPSS 44%
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content…
-
Unscored —
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a nu…
-
Unscored —
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bo…
-
Unscored —
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before …
-
Unscored —
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a s…
-
Unscored —
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases wh…
-
Unscored —
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting i…
-
Unscored —
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak privat…
-
Unscored —
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, result…
-
Unscored —
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication …
-
Unscored —
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which ent…
-
Unscored —
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Cha…
-
Unscored —
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial …