DeutschShown in its original language — a full translation is planned for a future version.
Mozilla NSS: Schwachstelle ermöglicht nicht spezifizierten Angriff
view advisory published 2020-07-27
Ein Angreifer kann eine Schwachstelle in Mozilla NSS ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-12403US | critical9.1 | — | ||
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fix… | ||||
| CVE-2020-6829US | medium5.3 | — | ||
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation.… | ||||
| CVE-2020-12401US | medium4.7OT elevated | — | ||
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent o… | ||||
| CVE-2020-12400US | medium4.7OT elevated | — | ||
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vuln… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2020:4076 vom 2021-04-30external
- Red Hat Security Advisory RHSA-2021:0758 vom 2021-03-10external
- Red Hat Security Advisory RHSA-2020:4076 vom 2020-09-29external
- Red Hat Security Advisory RHSA-2021:0538 vom 2021-02-16external
- Red Hat Security Advisory RHSA-2021:0876 vom 2021-03-16external
- Red Hat Security Advisory RHSA-2021:0949 vom 2021-03-22external
- Red Hat Security Advisory RHSA-2021:1026 vom 2021-03-30external
- Amazon Linux Security Advisory ALAS-2021-1522 vom 2021-07-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan