Unscored USN-4476-1 1 CVE

nss vulnerability

Published Aug 27, 2020 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that NSS incorrectly handled some inputs.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 4

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	nss	2:3.28.4-0ubuntu0.16.04.14
Ubuntu · 18.04 LTS 18.04:LTS	nss	2:3.35-2ubuntu2.12
Ubuntu · 20.04 LTS 20.04:LTS	nss	2:3.49.1-1ubuntu1.5
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	nss	2:3.28.4-0ubuntu0.14.04.5+esm8

Vulnerabilities 1

Unscored —

CVE-2020-12403

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Cha…

nss nss nss nss Debian Ubuntu Azure Linux Alpine

May 27, 2021

References

report
https://ubuntu.com/security/CVE-2020-12403