The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support for DHE ciphersuites.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions (CVE-2016-1938)

  - SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183)

  - Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows     remote attackers to affect confidentiality via vectors related to JCE. (CVE-2015-2613)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - nss: Cache side-channel variant of the Bleichenbacher attack (CVE-2018-12404)

  - nss: Information exposure when DH secret are reused across multiple TLS connections (CVE-2020-12413)

  - In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a     crash due to a null dereference, resulting in a Denial of Service. (CVE-2018-18508)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - nss: Information exposure when DH secret are reused across multiple TLS connections (CVE-2020-12413)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Severity
199397	RHEL 7 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199392	RHEL 8 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199307	RHEL 9 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2020-12413

medium

Tenable Plugins

high

medium

medium