Security
فارسی
All products

Red Hat Enterprise Linux 6/nss

Red Hat · Package
31 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
nss: DoS via repeated SSL session renegotiationsCVE-2011-5094 Red Hat Enterprise Linux 4/nssRed Hat Enterprise Linux 5/nss Red Hat Low No fix reported
HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)CVE-2011-3389 Red Hat Enterprise Linux 4/gnutlsRed Hat Enterprise Linux 4/java-1.5.0-ibm Red Hat Medium No fix reported
nss: /pkcs11.txt and /secmod.db files read on initializationCVE-2011-3640 Red Hat Enterprise Linux 6/nss Red Hat Unknown No fix reported
SSL/TLS: Attack against RC4 stream cipherCVE-2013-2566 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attackCVE-2014-3566 OpenShift Enterprise 1/jenkinsOpenStack Foreman/puppet Red Hat High No fix reported
SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipherCVE-2015-2808 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)CVE-2016-2183 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 5/openssl097a Red Hat Medium No fix reported
nss: Insufficient timing side-channel resistance in divSpoilerCVE-2016-9074 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSACVE-2016-9574 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
ROHNP: Key Extraction Side Channel in Multiple Crypto LibrariesCVE-2018-0495 CloudForms Management Engine 5/libtomcryptRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
nss: Cache side-channel variant of the Bleichenbacher attackCVE-2018-12404 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: NULL pointer dereference in several CMS functions resulting in a denial of serviceCVE-2018-18508 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: PKCS#1 v1.5 signatures can be used for TLS 1.3CVE-2019-11727 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Low No fix reported
nss: Empty or malformed p256-ECDH public keys may trigger a segmentation faultCVE-2019-11729 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: Out-of-bounds read when importing curve25519 private keyCVE-2019-11719 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: Use-after-free in sftk_FreeSession due to improper refcountingCVE-2019-11756 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: Check length of inputs for cryptographic primitivesCVE-2019-17006 Red Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid stateCVE-2019-17023 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Low No fix reported
nss: Timing attack on DSA signature generationCVE-2020-12399 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
nss: Side channel vulnerabilities during RSA key generationCVE-2020-12402 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported