Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:0105

Опубликовано: 12 янв. 2024
Источник: rocky
Оценка: Moderate

Описание

Moderate: nss security update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

  • nss: timing attack against RSA decryption (CVE-2023-5388)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
nssx86_644.el8_9nss-3.90.0-4.el8_9.x86_64.rpm
nss-develx86_644.el8_9nss-devel-3.90.0-4.el8_9.x86_64.rpm
nss-softoknx86_644.el8_9nss-softokn-3.90.0-4.el8_9.x86_64.rpm
nss-softokn-develx86_644.el8_9nss-softokn-devel-3.90.0-4.el8_9.x86_64.rpm
nss-softokn-freeblx86_644.el8_9nss-softokn-freebl-3.90.0-4.el8_9.x86_64.rpm
nss-softokn-freebl-develx86_644.el8_9nss-softokn-freebl-devel-3.90.0-4.el8_9.x86_64.rpm
nss-sysinitx86_644.el8_9nss-sysinit-3.90.0-4.el8_9.x86_64.rpm
nss-toolsx86_644.el8_9nss-tools-3.90.0-4.el8_9.x86_64.rpm
nss-utilx86_644.el8_9nss-util-3.90.0-4.el8_9.x86_64.rpm
nss-util-develx86_644.el8_9nss-util-devel-3.90.0-4.el8_9.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 1 года назад

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 6.5
redhat
больше 1 года назад

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 6.5
nvd
больше 1 года назад

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 6.5
debian
больше 1 года назад

NSS was susceptible to a timing side-channel attack when performing RS ...

suse-cvrf
11 месяцев назад

Security update for mozilla-nss