Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-25648

Опубликовано: 20 окт. 2020
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*
Версия до 3.58 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
Версия до 9.2.6.0 (исключая)

EPSS

Процентиль: 32%
0.00123
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770
CWE-770

Связанные уязвимости

ubuntu логотип

CVE-2020-25648

CVSS3: 7.5
ubuntu
почти 5 лет назад

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.

redhat логотип

CVE-2020-25648

CVSS3: 7.5
redhat
почти 5 лет назад

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.

debian логотип

CVE-2020-25648

CVSS3: 7.5
debian
почти 5 лет назад

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) message ...

rocky логотип

RLSA-2021:3572

rocky
почти 4 года назад

Moderate: nss and nspr security, bug fix, and enhancement update

github логотип

GHSA-43j5-76vw-pq2j

CVSS3: 7.5
github
около 3 лет назад

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.

EPSS

Процентиль: 32%
0.00123
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770
CWE-770