Red Hat Enterprise Linux 4/nss

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
nss: DoS via repeated SSL session renegotiationsCVE-2011-5094	Red Hat Enterprise Linux 4/nss Red Hat Enterprise Linux 5/nss	Red Hat	Low	No fix reported	Not recorded
HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)CVE-2011-3389	Red Hat Enterprise Linux 4/gnutls Red Hat Enterprise Linux 4/java-1.5.0-ibm	Red Hat	Medium	No fix reported	Not recorded
nss: TOCTOU, potential use-after-free in libssl's session ticket processing (MFSA 2014-12)CVE-2014-1490	Red Hat Enterprise Linux 4/nss	Red Hat	Medium	No fix reported	Not recorded
nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)CVE-2015-7182	Red Hat Enterprise Linux 4/nss	Red Hat	Critical	No fix reported	Not recorded
nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133)CVE-2015-7181	Red Hat Enterprise Linux 4/nss	Red Hat	Critical	No fix reported	Not recorded
nss: Write beyond bounds caused by bugs in Base64 de/encoding in nssb64d.c and nssb64e.c (MFSA 2017-10)CVE-2017-5461	Red Hat Enterprise Linux 4/nss	Red Hat	Critical	No fix reported	Not recorded