Summary
Lenny Wang discovered that NSS incorrectly handled certain
messages. A remote attacker could possibly use this issue to cause
servers compiled with NSS to stop responding, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | nss | 2:3.35-2ubuntu2.14 |
| Ubuntu · 20.04 LTS 20.04:LTS | nss | 2:3.49.1-1ubuntu1.7 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker …
References
-
report
https://ubuntu.com/security/CVE-2020-25648