52 results · Feed
-
High 7.3
Incorrect boundary conditions in the Libraries component in NSS
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
-
High 8.8
Integer overflow in the Libraries component in NSS
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
-
Medium 6.5
NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow…
-
Unscored —
Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially al…
-
Unscored —
The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks. Both…
-
High 8.8
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 1…
-
High 8.8
Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer…
-
Medium 6.5
After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have l…
-
Unscored —CVE-2021-43527 EPSS 18%
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DE…
-
Unscored —
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Cha…
-
Unscored —
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial …
-
Unscored —
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting i…
-
Unscored —
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases wh…
-
Unscored —
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a nu…
-
Unscored —
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker …
-
Unscored —
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, result…
-
Unscored —
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication …
-
Unscored —
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which ent…
-
Unscored —
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak privat…
-
Unscored —
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invali…
-
Unscored —
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a s…
-
Unscored —
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK1…
-
Unscored —
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bo…
-
Unscored —
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before …
-
Unscored —CVE-2018-12404 EPSS 44%
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content…
-
Unscored —
When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-z…
-
Medium 5.3
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinemen…
-
Unscored —
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can b…
-
Unscored —
An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in…
-
Unscored —
During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for l…
-
Unscored —
A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not…
-
Unscored —
The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to…
-
Unscored —
Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS…
-
Unscored —
Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) …
-
Unscored —
Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS)…
-
Unscored —
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resultin…
-
Unscored —
Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3…
-
High 7.5
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…
-
Unscored —
Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to…
-
Unscored —
Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21…