Описание
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2:3.26-1ubuntu1 |
| esm-infra-legacy/trusty | released | 2:3.26.2-0ubuntu0.14.04.3 |
| esm-infra-legacy/xenial | released | 2:3.26.2-0ubuntu0.16.04.2 |
| esm-infra/xenial | released | 2:3.26.2-0ubuntu0.16.04.2 |
| precise | released | 2:3.26.2-0ubuntu0.12.04.1 |
| precise/esm | not-affected | 2:3.26.2-0ubuntu0.12.04.1 |
| trusty | released | 2:3.26.2-0ubuntu0.14.04.3 |
| trusty/esm | released | 2:3.26.2-0ubuntu0.14.04.3 |
| upstream | released | 3.25 |
| vivid/stable-phone-overlay | ignored | end of life |
Показывать по
EPSS
4.3 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
It was found that Diffie Hellman Client key exchange handling in NSS 3 ...
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
ELSA-2016-2779: nss and nss-util security update (MODERATE)
EPSS
4.3 Medium
CVSS2
5.3 Medium
CVSS3