Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2023:1252

Опубликовано: 16 мар. 2023
Источник: rocky
Оценка: Important

Описание

Important: nss security update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

  • nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
nssx86_6411.el8_7nss-3.79.0-11.el8_7.x86_64.rpm
nss-develx86_6411.el8_7nss-devel-3.79.0-11.el8_7.x86_64.rpm
nss-softoknx86_6411.el8_7nss-softokn-3.79.0-11.el8_7.x86_64.rpm
nss-softokn-develx86_6411.el8_7nss-softokn-devel-3.79.0-11.el8_7.x86_64.rpm
nss-softokn-freeblx86_6411.el8_7nss-softokn-freebl-3.79.0-11.el8_7.x86_64.rpm
nss-softokn-freebl-develx86_6411.el8_7nss-softokn-freebl-devel-3.79.0-11.el8_7.x86_64.rpm
nss-sysinitx86_6411.el8_7nss-sysinit-3.79.0-11.el8_7.x86_64.rpm
nss-toolsx86_6411.el8_7nss-tools-3.79.0-11.el8_7.x86_64.rpm
nss-utilx86_6411.el8_7nss-util-3.79.0-11.el8_7.x86_64.rpm
nss-util-develx86_6411.el8_7nss-util-devel-3.79.0-11.el8_7.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 2 лет назад

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 8.8
redhat
больше 2 лет назад

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 8.8
nvd
около 2 лет назад

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS3: 8.8
debian
около 2 лет назад

An attacker could construct a PKCS 12 cert bundle in such a way that c ...

suse-cvrf
больше 2 лет назад

Security update for mozilla-nss