Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2023-1332

Опубликовано: 20 мар. 2023
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2023-1332: nss security update (IMPORTANT)

[3.79.0-5]

  • fix CVE-2023-0767

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

nss

3.79.0-5.el7_9

nss-devel

3.79.0-5.el7_9

nss-pkcs11-devel

3.79.0-5.el7_9

nss-sysinit

3.79.0-5.el7_9

nss-tools

3.79.0-5.el7_9

Oracle Linux x86_64

nss

3.79.0-5.el7_9

nss-devel

3.79.0-5.el7_9

nss-pkcs11-devel

3.79.0-5.el7_9

nss-sysinit

3.79.0-5.el7_9

nss-tools

3.79.0-5.el7_9

Связанные CVE

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 2 лет назад

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 8.8
redhat
больше 2 лет назад

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 8.8
nvd
около 2 лет назад

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 8.8
debian
около 2 лет назад

An attacker could construct a PKCS 12 cert bundle in such a way that c ...

suse-cvrf
больше 2 лет назад

Security update for mozilla-nss