Security
فارسی
All products

Red Hat Enterprise Linux 5/nss

Red Hat · Package
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
nss: DoS via repeated SSL session renegotiationsCVE-2011-5094 Red Hat Enterprise Linux 4/nssRed Hat Enterprise Linux 5/nss Red Hat Low No fix reported
HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)CVE-2011-3389 Red Hat Enterprise Linux 4/gnutlsRed Hat Enterprise Linux 4/java-1.5.0-ibm Red Hat Medium No fix reported
nss: Dis-trust TURKTRUST mis-issued *.google.com certificateCVE-2013-0743 Red Hat Enterprise Linux 5/nss Red Hat High No fix reported
SSL/TLS: Attack against RC4 stream cipherCVE-2013-2566 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attackCVE-2014-3566 OpenShift Enterprise 1/jenkinsOpenStack Foreman/puppet Red Hat High No fix reported
SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipherCVE-2015-2808 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacksCVE-2015-4000 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 5/openssl097a Red Hat Medium No fix reported
JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)CVE-2015-2613 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss-softokn Red Hat Medium No fix reported
NSS: Errors in mp_div and mp_exptmod cryptographic functionsCVE-2016-1938 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss-softokn Red Hat Low No fix reported
SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)CVE-2016-2183 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 5/openssl097a Red Hat Medium No fix reported
nss: Insufficient timing side-channel resistance in divSpoilerCVE-2016-9074 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSACVE-2016-9574 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: Null pointer dereference when handling empty SSLv2 messagesCVE-2017-7502 Red Hat Enterprise Linux 5/nss Red Hat High No fix reported
Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)CVE-2017-7781 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss-softokn Red Hat Medium No fix reported
nss: Potential use-after-free in TLS 1.2 server when verifying client authenticationCVE-2017-7805 Red Hat Enterprise Linux 5/nss Red Hat High No fix reported
ROHNP: Key Extraction Side Channel in Multiple Crypto LibrariesCVE-2018-0495 CloudForms Management Engine 5/libtomcryptRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
nss: Cache side-channel variant of the Bleichenbacher attackCVE-2018-12404 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: NULL pointer dereference in several CMS functions resulting in a denial of serviceCVE-2018-18508 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
nss: PKCS#1 v1.5 signatures can be used for TLS 1.3CVE-2019-11727 Red Hat Enterprise Linux 5/nssRed Hat Enterprise Linux 6/nss Red Hat Low No fix reported
nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdateCVE-2019-11745 Red Hat Enterprise Linux 5/nss Red Hat High No fix reported