In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions (CVE-2016-1938)

  - SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183)

  - Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows     remote attackers to affect confidentiality via vectors related to JCE. (CVE-2015-2613)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions (CVE-2016-1938)

  - SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183)

  - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer,     Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained     initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a     blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses     (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a     BEAST attack. (CVE-2011-3389)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - nss: Cache side-channel variant of the Bleichenbacher attack (CVE-2018-12404)

  - nss: Information exposure when DH secret are reused across multiple TLS connections (CVE-2020-12413)

  - In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a     crash due to a null dereference, resulting in a Denial of Service. (CVE-2018-18508)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions (CVE-2016-1938)

  - SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183)

  - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer,     Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained     initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a     blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses     (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a     BEAST attack. (CVE-2011-3389)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a     crash due to a null dereference, resulting in a Denial of Service. (CVE-2018-18508)

  - In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to     crash, resulting in a denial of service. (CVE-2019-17007)

  - A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a     remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the     NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS     versions before 3.58. (CVE-2020-25648)

  - NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow     when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures     encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for     certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how     they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and     PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and     Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
    (CVE-2021-43527)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Network Security Services (NSS) before 3.36.7 and     before 3.41.1, a malformed signature can cause a crash     due to a null dereference, resulting in a Denial of     Service.(CVE-2018-18508)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In Network Security Services (NSS) before 3.36.7 and     before 3.41.1, a malformed signature can cause a crash     due to a null dereference, resulting in a Denial of     Service.(CVE-2018-18508)

  - In Network Security Services before 3.44, a malformed     Netscape Certificate Sequence can cause NSS to crash,     resulting in a denial of service.(CVE-2019-17007)

  - A flaw was found in the way NSS handled CCS     (ChangeCipherSpec) messages in TLS 1.3. This flaw     allows a remote attacker to send multiple CCS messages,     causing a denial of service for servers compiled with     the NSS library. The highest threat from this     vulnerability is to system availability. This flaw     affects NSS versions before 3.58.(CVE-2020-25648)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the way NSS handled CCS     (ChangeCipherSpec) messages in TLS 1.3. This flaw     allows a remote attacker to send multiple CCS messages,     causing a denial of service for servers compiled with     the NSS library. The highest threat from this     vulnerability is to system availability. This flaw     affects NSS versions before 3.58.(CVE-2020-25648)

  - In Network Security Services (NSS) before 3.36.7 and     before 3.41.1, a malformed signature can cause a crash     due to a null dereference, resulting in a Denial of     Service.(CVE-2018-18508)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the way NSS handled CCS     (ChangeCipherSpec) messages in TLS 1.3. This flaw     allows a remote attacker to send multiple CCS messages,     causing a denial of service for servers compiled with     the NSS library. The highest threat from this     vulnerability is to system availability. This flaw     affects NSS versions before 3.58.(CVE-2020-25648)

  - In Network Security Services before 3.44, a malformed     Netscape Certificate Sequence can cause NSS to crash,     resulting in a denial of service.(CVE-2019-17007)

  - In Network Security Services (NSS) before 3.36.7 and     before 3.41.1, a malformed signature can cause a crash     due to a null dereference, resulting in a Denial of     Service.(CVE-2018-18508)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1951 advisory.

  - nss: NULL pointer dereference in several CMS functions resulting in a denial of service (CVE-2018-18508)

  - nss: Out-of-bounds read when importing curve25519 private key (CVE-2019-11719)

  - nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)

  - nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)

  - nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref     leading to DoS (CVE-2019-17007)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Network Security Services (NSS) before 3.36.7 and     before 3.41.1, a malformed signature can cause a crash     due to a null dereference, resulting in a Denial of     Service.(CVE-2018-18508)

  - In Network Security Services before 3.44, a malformed     Netscape Certificate Sequence can cause NSS to crash,     resulting in a denial of service.(CVE-2019-17007)

  - A flaw was found in the way NSS handled CCS     (ChangeCipherSpec) messages in TLS 1.3. This flaw     allows a remote attacker to send multiple CCS messages,     causing a denial of service for servers compiled with     the NSS library. The highest threat from this     vulnerability is to system availability. This flaw     affects NSS versions before 3.58.(CVE-2020-25648)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Various vulnerabilities were fixed in nss, the Network Security Service libraries.

CVE-2018-12404

Cache side-channel variant of the Bleichenbacher attack.

CVE-2018-18508

NULL pointer dereference in several CMS functions resulting in a denial of service.

CVE-2019-11719

Out-of-bounds read when importing curve25519 private key.

CVE-2019-11729

Empty or malformed p256-ECDH public keys may trigger a segmentation fault.

CVE-2019-11745

Out-of-bounds write when encrypting with a block cipher.

CVE-2019-17006

Some cryptographic primitives did not check the length of the input text, potentially resulting in overflows.

CVE-2019-17007

Handling of Netscape Certificate Sequences may crash with a NULL dereference leading to a denial of service.

CVE-2020-12399

Force a fixed length for DSA exponentiation.

CVE-2020-6829 CVE-2020-12400

Side channel attack on ECDSA signature generation.

CVE-2020-12401

ECDSA timing attack mitigation bypass.

CVE-2020-12402

Side channel vulnerabilities during RSA key generation.

CVE-2020-12403

CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read.

For Debian 9 stretch, these problems have been fixed in version 2:3.26.2-1.1+deb9u2.

We recommend that you upgrade your nss packages.

For the detailed security status of nss please refer to its security tracker page at: https://security-tracker.debian.org/tracker/nss

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202003-37 (Mozilla Network Security Service: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Network       Security Service (NSS). Please review the CVE identifiers referenced       below for details.
  Impact :

    An attacker could execute arbitrary code, cause a Denial of Service       condition or have other unspecified impact.
  Workaround :

    There is no known workaround at this time.

This update for mozilla-nspr, mozilla-nss fixes the following issues :

mozilla-nss was updated to NSS 3.47.1 :

Security issues fixed :

  - CVE-2019-17006: Added length checks for cryptographic     primitives (bsc#1159819).

  - CVE-2019-11745: EncryptUpdate should use maxout, not     block size (bsc#1158527).

  - CVE-2019-11727: Fixed vulnerability sign     CertificateVerify with PKCS#1 v1.5 signatures issue     (bsc#1141322).

mozilla-nspr was updated to version 4.23 :

  - Whitespace in C files was cleaned up and no longer uses     tab characters for indenting.

This update was imported from the SUSE:SLE-15:Update update project.

This update for mozilla-nspr, mozilla-nss fixes the following issues :

mozilla-nss was updated to NSS 3.47.1 :

Security issues fixed :

CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).

CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).

CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).

mozilla-nspr was updated to version 4.23: Whitespace in C files was cleaned up and no longer uses tab characters for indenting.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1951 advisory.

    Network Security Services (NSS) is a set of libraries designed to support the cross-platform development     of security-enabled client and server applications.

    Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.

    The following packages have been upgraded to a later upstream version: nss (3.44.0), nspr (4.21.0).
    (BZ#1713187, BZ#1713188)

    Security Fix(es):

    * nss: NULL pointer dereference in several CMS functions resulting in a denial of service (CVE-2018-18508)

    * nss: Out-of-bounds read when importing curve25519 private key (CVE-2019-11719)

    * nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)

    * nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * PQG verify fails when create DSA PQG parameters because the counts aren't returned correctly.
    (BZ#1685325)

    * zeroization of AES context missing (BZ#1719629)

    * RSA Pairwise consistency test (BZ#1719630)

    * FIPS updated for nss-softoken POST (BZ#1722373)

    * DH/ECDH key tests missing for the PG parameters (BZ#1722374)

    * NSS should implement continuous random test on it's seed data or use the kernel AF_ALG interface for     random (BZ#1725059)

    * support setting supported signature algorithms in strsclnt utility (BZ#1725110)

    * certutil -F with no parameters is killed with segmentation fault message (BZ#1725115)

    * NSS: Support for IKE/IPsec typical PKIX usage so libreswan can use nss without rejecting certs based on     EKU (BZ#1725116)

    * NSS should use getentropy() for seeding its RNG, not /dev/urandom. Needs update to NSS 3.37 (BZ#1725117)

    * Disable TLS 1.3 in FIPS mode (BZ#1725773)

    * Wrong alert sent when client uses PKCS#1 signatures in TLS 1.3 (BZ#1728259)

    * x25519 allowed in FIPS mode (BZ#1728260)

    * post handshake authentication with selfserv does not work if SSL_ENABLE_SESSION_TICKETS is set     (BZ#1728261)

    Enhancement(s):

    * Move IKEv1 and IKEv2 KDF's from libreswan to nss-softkn (BZ#1719628)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1951 advisory.

    nspr     [4.21.0-2]
    - Rebuild

    [4.21.0-1]
    - Update to NSPR 4.21

    nss     [3.44.0-7]
    - Backport fixes from 3.44.1

    [3.44.0-6]
    - Add continuous RNG test required by FIPS
    - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism

    [3.44.0-5]
    - Rebuild with the correct build target

    [3.44.0-4.1]
    - rebuild to try to retrigger CI tests

    [3.44.0-4]
    - Fix certutil man page
    - Fix extracting a public key from a private key for dh, ec, and dsa

    [3.44.0-3]
    - Disable TLS 1.3 under FIPS mode
    - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
    - Fix post-handshake auth transcript calculation if       SSL_ENABLE_SESSION_TICKETS is set
    - Revert the change to use XDG basedirs (mozilla#818686)

    [3.44.0-2]
    - Add ike mechanisms in softokn
    - Add FIPS checks in softoken

    [3.44.0-1]
    - Update to NSS 3.44
    - Define NSS_SEED_ONLY_DEV_URANDOM=1 to exclusively use getentropy
    - Use %autosetup
    - Clean up manual pages generation
    - Clean up %check
    - Remove prelink dependency, which is not available in RHEL-8
    - Remove upstreamed patches

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Vulnerabilities have been discovered in nss, the Mozilla Network Security Service library.

CVE-2018-12404

Cache side-channel variant of the Bleichenbacher attack

CVE-2018-18508

NULL pointer dereference in several CMS functions resulting in a denial of service

For Debian 8 'Jessie', these problems have been fixed in version 2:3.26-1+debu8u4.

We recommend that you upgrade your nss packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updates the nss package to upstream NSS 3.42.1.

For details about new functionality and a list of bugs fixed in this release please see the upstream release notes

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.42 .1_release_notes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3898-1 advisory.

    Hanno Bck and Damian Poddebniak discovered that NSS incorrectly handled certain CMS functions. A remote     attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
199397	RHEL 7 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199394	RHEL 5 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199392	RHEL 8 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199376	RHEL 6 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
501626	Siemens RUGGEDCOM ROX II Null Pointer Dereference (CVE-2018-18508)	Tenable OT Security	Tenable.ot	medium
175212	EulerOS Virtualization 3.0.2.0 : nss (EulerOS-SA-2023-1713)	Nessus	Huawei Local Security Checks	critical
153321	EulerOS 2.0 SP2 : nss (EulerOS-SA-2021-2413)	Nessus	Huawei Local Security Checks	medium
151417	EulerOS Virtualization 3.0.2.2 : nss (EulerOS-SA-2021-2150)	Nessus	Huawei Local Security Checks	high
147577	EulerOS Virtualization 3.0.2.6 : nss (EulerOS-SA-2021-1416)	Nessus	Huawei Local Security Checks	high
147074	EulerOS Virtualization 3.0.6.6 : nss (EulerOS-SA-2021-1502)	Nessus	Huawei Local Security Checks	high
146183	EulerOS 2.0 SP5 : nss (EulerOS-SA-2021-1218)	Nessus	Huawei Local Security Checks	medium
145690	CentOS 8 : nss and nspr (CESA-2019:1951)	Nessus	CentOS Local Security Checks	high
145155	EulerOS 2.0 SP3 : nss (EulerOS-SA-2021-1102)	Nessus	Huawei Local Security Checks	high
141062	Debian DLA-2388-1 : nss security update	Nessus	Debian Local Security Checks	critical
134643	GLSA-202003-37 : Mozilla Network Security Service: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
132849	openSUSE Security Update : mozilla-nspr / mozilla-nss (openSUSE-2020-8)	Nessus	SuSE Local Security Checks	critical
132518	SUSE SLED15 / SLES15 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2019:3395-1)	Nessus	SuSE Local Security Checks	critical
127636	RHEL 8 : nss and nspr (RHSA-2019:1951)	Nessus	Red Hat Local Security Checks	high
127609	Oracle Linux 8 : nss / and / nspr (ELSA-2019-1951)	Nessus	Oracle Linux Local Security Checks	high
122604	Debian DLA-1704-1 : nss security update	Nessus	Debian Local Security Checks	medium
122565	Fedora 28 : nss (2019-c602845b91)	Nessus	Fedora Local Security Checks	medium
122499	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : NSS vulnerability (USN-3898-1)	Nessus	Ubuntu Local Security Checks	medium
122198	Fedora 29 : nss (2019-68b9bec5ca)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2018-18508

medium

Tenable Plugins

high

high

medium

high

medium

critical

medium

high

high

high

medium

high

high

critical

high

critical

critical

high

high

medium

medium

medium

medium