Red Hat Enterprise Linux 7/nss

Red Hat · Package

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipherCVE-2015-2808	Red Hat Enterprise Linux 5/gnutls Red Hat Enterprise Linux 5/nss	Red Hat	Medium	No fix reported	Not recorded
SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)CVE-2016-2183	Red Hat Enterprise Linux 5/nss Red Hat Enterprise Linux 5/openssl097a	Red Hat	Medium	No fix reported	Not recorded
nss: Insufficient timing side-channel resistance in divSpoilerCVE-2016-9074	Red Hat Enterprise Linux 5/nss Red Hat Enterprise Linux 6/nss	Red Hat	Medium	No fix reported	Not recorded
nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSACVE-2016-9574	Red Hat Enterprise Linux 5/nss Red Hat Enterprise Linux 6/nss	Red Hat	Medium	No fix reported	Not recorded
nss: NULL pointer dereference in several CMS functions resulting in a denial of serviceCVE-2018-18508	Red Hat Enterprise Linux 5/nss Red Hat Enterprise Linux 6/nss	Red Hat	Medium	No fix reported	Not recorded
nss: Information exposure when DH secret are reused across multiple TLS connectionsCVE-2020-12413	Red Hat Enterprise Linux 5/nss Red Hat Enterprise Linux 6/nss	Red Hat	Low	No fix reported	Not recorded
nss: timing attack against RSA decryptionCVE-2023-5388	Red Hat Enterprise Linux 6/firefox Red Hat Enterprise Linux 6/nss	Red Hat	Medium	No fix reported	Not recorded
nss: vulnerable to Minerva side-channel information leakCVE-2023-6135	Red Hat Enterprise Linux 6/firefox Red Hat Enterprise Linux 6/nss	Red Hat	Medium	No fix reported	Not recorded
Mozilla: Memory corruption in NSSCVE-2024-6602	Red Hat Enterprise Linux 6/firefox Red Hat Enterprise Linux 6/nss	Red Hat	Medium	No fix reported	Not recorded
mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machinesCVE-2024-7531	Red Hat Enterprise Linux 6/firefox Red Hat Enterprise Linux 6/nss	Red Hat	Low	No fix reported	Not recorded