Action not permitted
Modal body text goes here.
CVE-2018-18508
Vulnerability from cvelistv5
Published
2020-10-22 20:14
Modified
2024-08-05 11:08
Severity
Summary
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
References
| Source | URL | Tags |
|---|---|---|
| security@mozilla.org | https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf | Third Party Advisory |
| security@mozilla.org | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes | Release Notes, Vendor Advisory |
| security@mozilla.org | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes | Release Notes, Vendor Advisory |
| security@mozilla.org | https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04 | Third Party Advisory, US Government Resource |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:08:22.039Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "NSS",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "3.41.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "3.36.7",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Denial of Service through malformed signatures",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-02-12T05:57:40",
"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"shortName": "mozilla"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2018-18508",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "NSS",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "3.41.1"
},
{
"version_affected": "\u003c",
"version_value": "3.36.7"
}
]
}
}
]
},
"vendor_name": "Mozilla"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service through malformed signatures"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes",
"refsource": "MISC",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes"
},
{
"name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes",
"refsource": "MISC",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04",
"refsource": "MISC",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"assignerShortName": "mozilla",
"cveId": "CVE-2018-18508",
"datePublished": "2020-10-22T20:14:42",
"dateReserved": "2018-10-19T00:00:00",
"dateUpdated": "2024-08-05T11:08:22.039Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2018-18508\",\"sourceIdentifier\":\"security@mozilla.org\",\"published\":\"2020-10-22T21:15:12.467\",\"lastModified\":\"2021-02-18T15:20:57.460\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.\"},{\"lang\":\"es\",\"value\":\"En Network Security Services (NSS) versiones anteriores a 3.36.7 y versiones anteriores a 3.41.1, una firma malformada puede causar un bloqueo debido a una desreferencia de null, resultando en una Denegaci\u00f3n de Servicio\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":4.3},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.36.7\",\"matchCriteriaId\":\"B93092E8-AB81-499E-A4DC-327E6D587CA5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.41\",\"versionEndExcluding\":\"3.41.1\",\"matchCriteriaId\":\"62F5DA72-5D31-47E7-9BC8-5CCADC75C3F1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rox_mx5000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAD1B18F-9C37-48CC-92E2-9C5E66B206CB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_rox_mx5000_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.0\",\"matchCriteriaId\":\"1B09C415-21F2-49C9-BFAE-2151C8ED4D06\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rox_rx1400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12BD4008-DB6A-4749-A426-D2DE44819A9D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_rox_rx1400_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.0\",\"matchCriteriaId\":\"F196C09E-4C45-42D5-B509-7EB77F6566F1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rox_rx1500:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E79B422-C844-411C-AA49-CFD73D3C6E2D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_rox_rx1500_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.0\",\"matchCriteriaId\":\"13D72F66-A1B2-4FB7-B31B-EF16955BC871\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rox_rx1501:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53AAEC5C-06EE-4C58-A981-EBF5860CEF16\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_rox_rx1501_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.0\",\"matchCriteriaId\":\"CB658DF3-A68F-4248-B240-9194E17941E1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rox_rx1510:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0751225A-6E9C-4281-93A4-A048920FF7C6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_rox_rx1510_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.0\",\"matchCriteriaId\":\"E16E621D-84DB-4F0D-A771-5E282B0292B2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rox_rx1511:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C1E56ED-1E61-4B7E-8EC0-BB2AAD57EF7B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_rox_rx1511_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.0\",\"matchCriteriaId\":\"059624DD-C1C8-408C-8026-D4FBC93C3CF9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rox_rx1512:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"41ADD701-AD49-46B2-A12E-219CCED32298\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_rox_rx1512_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.0\",\"matchCriteriaId\":\"06AF9201-89AB-42E6-97CF-9EDDC17EF7AE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rox_rx5000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E0E33F2-E89B-4008-BED2-CF2296801078\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_rox_rx5000_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.0\",\"matchCriteriaId\":\"2656219C-7E23-47F7-AFB7-0D6D3D2ACA85\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes\",\"source\":\"security@mozilla.org\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes\",\"source\":\"security@mozilla.org\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]}]}}"
}
}
gsd-2018-18508
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2018-18508",
"description": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.",
"id": "GSD-2018-18508",
"references": [
"https://www.suse.com/security/cve/CVE-2018-18508.html",
"https://access.redhat.com/errata/RHSA-2019:1951",
"https://ubuntu.com/security/CVE-2018-18508",
"https://linux.oracle.com/cve/CVE-2018-18508.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2018-18508"
],
"details": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.",
"id": "GSD-2018-18508",
"modified": "2023-12-13T01:22:36.295562Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2018-18508",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "NSS",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "3.41.1"
},
{
"version_affected": "\u003c",
"version_value": "3.36.7"
}
]
}
}
]
},
"vendor_name": "Mozilla"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service through malformed signatures"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes",
"refsource": "MISC",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes"
},
{
"name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes",
"refsource": "MISC",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04",
"refsource": "MISC",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.36.7",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.41.1",
"versionStartIncluding": "3.41",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_mx5000_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_mx5000:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1400_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1400:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1500_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1500:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1501_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1501:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1510_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1510:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1511_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1511:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1512_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1512:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx5000_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx5000:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2018-18508"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes",
"refsource": "MISC",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes"
},
{
"name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes",
"refsource": "MISC",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04",
"refsource": "MISC",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2021-02-18T15:20Z",
"publishedDate": "2020-10-22T21:15Z"
}
}
}
icsa-21-040-04
Vulnerability from csaf_cisa
Published
2021-02-09 00:00
Modified
2021-02-09 00:00
Summary
Siemens RUGGEDCOM ROX II
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow the decryption of encrypted content, possible code execution, or cause a system crash, resulting in a denial-of-service condition.
Critical infrastructure sectors
Critical Manufacturing
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Organizations observing any suspected malicious activity should follow their established internalprocedures and report their findings to CISA for tracking and correlation against other incidents.
Recommended Practices
CISA also recommends users take the following measures to protect themselves from social engineering attacks:
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and
solutions, please contact the Siemens ProductCERT:
https://www.siemens.com/cert/advisories
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Exploitability
No known public exploits specifically target these vulnerabilities.
{
"document": {
"acknowledgments": [
{
"organization": "Siemens ProductCERT",
"summary": "reporting these vulnerabilities to CISA"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
"title": "CISA Disclaimer"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities could allow the decryption of encrypted content, possible code execution, or cause a system crash, resulting in a denial-of-service condition.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": "Critical Manufacturing",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internalprocedures and report their findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and \nsolutions, please contact the Siemens ProductCERT:\n\nhttps://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "other",
"text": "No known public exploits specifically target these vulnerabilities.",
"title": "Exploitability"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-21-040-04 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-040-04.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-21-040-04 Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-040-04"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/ncas/tips/ST04-014"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B"
},
{
"category": "external",
"summary": "SSA-496604: SSA-379803: Vulnerabilities in RUGGEDCOM ROX II - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/SSA-379803.txt"
}
],
"title": "Siemens RUGGEDCOM ROX II",
"tracking": {
"current_release_date": "2021-02-09T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-21-040-04",
"initial_release_date": "2021-02-09T00:00:00.000000Z",
"revision_history": [
{
"date": "2021-02-09T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "ICSA-21-040-04 Siemens RUGGEDCOM ROX II"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "All versions \u003c V2.14.0",
"product": {
"name": "RUGGEDCOM ROX MX5000: All versions \u003c V2.14.0",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX MX5000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "All versions \u003c V2.14.0",
"product": {
"name": "RUGGEDCOM ROX RX1400: All versions \u003c V2.14.0",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1400"
},
{
"branches": [
{
"category": "product_version_range",
"name": "All versions \u003c V2.14.0",
"product": {
"name": "RUGGEDCOM ROX RX1500: All versions \u003c V2.14.0",
"product_id": "CSAFPID-0003"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1500"
},
{
"branches": [
{
"category": "product_version_range",
"name": "All versions \u003c V2.14.0",
"product": {
"name": "RUGGEDCOM ROX RX1501: All versions \u003c V2.14.0",
"product_id": "CSAFPID-0004"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1501"
},
{
"branches": [
{
"category": "product_version_range",
"name": "All versions \u003c V2.14.0",
"product": {
"name": "RUGGEDCOM ROX RX1510: All versions \u003c V2.14.0",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1510"
},
{
"branches": [
{
"category": "product_version_range",
"name": "All versions \u003c V2.14.0",
"product": {
"name": "RUGGEDCOM ROX RX1511: All versions \u003c V2.14.0",
"product_id": "CSAFPID-0006"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1511"
},
{
"branches": [
{
"category": "product_version_range",
"name": "All versions \u003c V2.14.0",
"product": {
"name": "RUGGEDCOM ROX RX1512: All versions \u003c V2.14.0",
"product_id": "CSAFPID-0007"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1512"
},
{
"branches": [
{
"category": "product_version_range",
"name": "All versions \u003c V2.14.0",
"product": {
"name": "RUGGEDCOM ROX RX5000: All versions \u003c V2.14.0",
"product_id": "CSAFPID-0008"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX5000"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-12404",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
"references": [
{
"category": "external",
"summary": "https://support.industry.siemens.com/cs/ww/en/view/109792715/",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-12404"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Disable IPsec unless the feature is required in the network environment.\nNote that IPsec is disabled by default.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0007"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
]
},
{
"cve": "CVE-2018-18508",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
"references": [
{
"category": "external",
"summary": "https://support.industry.siemens.com/cs/ww/en/view/109792715/",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18508"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Disable IPsec unless the feature is required in the network environment.\nNote that IPsec is disabled by default.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0007"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
]
},
{
"cve": "CVE-2019-11745",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
"references": [
{
"category": "external",
"summary": "https://support.industry.siemens.com/cs/ww/en/view/109792715/",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11745"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Disable IPsec unless the feature is required in the network environment.\nNote that IPsec is disabled by default.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0007"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
]
},
{
"cve": "CVE-2019-17006",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"notes": [
{
"category": "summary",
"text": "In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
"references": [
{
"category": "external",
"summary": "https://support.industry.siemens.com/cs/ww/en/view/109792715/",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-17006"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Disable IPsec unless the feature is required in the network environment.\nNote that IPsec is disabled by default.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0007"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
]
},
{
"cve": "CVE-2019-17007",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
"references": [
{
"category": "external",
"summary": "https://support.industry.siemens.com/cs/ww/en/view/109792715/",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-17007"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Disable IPsec unless the feature is required in the network environment.\nNote that IPsec is disabled by default.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0007"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
]
},
{
"cve": "CVE-2020-1763",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
"references": [
{
"category": "external",
"summary": "https://support.industry.siemens.com/cs/ww/en/view/109792715/",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-1763"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Disable IPsec unless the feature is required in the network environment.\nNote that IPsec is disabled by default.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0002"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0003"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0004"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0006"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0007"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "vendor_fix",
"details": "Update to V2.14.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109792715/ ",
"product_ids": [
"CSAFPID-0008"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109792715/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008"
]
}
]
}
]
}
ghsa-45r6-rwfw-29cq
Vulnerability from github
Published
2022-05-24 17:31
Modified
2022-05-24 17:31
Details
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
{
"affected": [],
"aliases": [
"CVE-2018-18508"
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2020-10-22T21:15:00Z",
"severity": "MODERATE"
},
"details": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.",
"id": "GHSA-45r6-rwfw-29cq",
"modified": "2022-05-24T17:31:54Z",
"published": "2022-05-24T17:31:54Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18508"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
},
{
"type": "WEB",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes"
},
{
"type": "WEB",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes"
},
{
"type": "WEB",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
}
],
"schema_version": "1.4.0",
"severity": []
}
var-202010-1059
Vulnerability from variot
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service. Attackers can exploit this issue to crash the application, resulting in a denial-of-service condition. Mozilla Network Security Services versions prior to 3.41.1 are vulnerable. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
====================================================================
Red Hat Security Advisory
Synopsis: Moderate: nss and nspr security, bug fix, and enhancement update Advisory ID: RHSA-2019:1951-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:1951 Issue date: 2019-07-30 CVE Names: CVE-2018-18508 CVE-2019-11719 CVE-2019-11727 CVE-2019-11729 ==================================================================== 1. Summary:
An update for nss and nspr is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64
- Description:
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.
The following packages have been upgraded to a later upstream version: nss (3.44.0), nspr (4.21.0). (BZ#1713187, BZ#1713188)
Security Fix(es):
-
nss: NULL pointer dereference in several CMS functions resulting in a denial of service (CVE-2018-18508)
-
nss: Out-of-bounds read when importing curve25519 private key (CVE-2019-11719)
-
nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)
-
nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
PQG verify fails when create DSA PQG parameters because the counts aren't returned correctly. (BZ#1685325)
-
zeroization of AES context missing (BZ#1719629)
-
RSA Pairwise consistency test (BZ#1719630)
-
FIPS updated for nss-softoken POST (BZ#1722373)
-
DH/ECDH key tests missing for the PG parameters (BZ#1722374)
-
NSS should implement continuous random test on it's seed data or use the kernel AF_ALG interface for random (BZ#1725059)
-
support setting supported signature algorithms in strsclnt utility (BZ#1725110)
-
certutil -F with no parameters is killed with segmentation fault message (BZ#1725115)
-
NSS: Support for IKE/IPsec typical PKIX usage so libreswan can use nss without rejecting certs based on EKU (BZ#1725116)
-
NSS should use getentropy() for seeding its RNG, not /dev/urandom. Needs update to NSS 3.37 (BZ#1725117)
-
Disable TLS 1.3 in FIPS mode (BZ#1725773)
-
Wrong alert sent when client uses PKCS#1 signatures in TLS 1.3 (BZ#1728259)
-
x25519 allowed in FIPS mode (BZ#1728260)
-
post handshake authentication with selfserv does not work if SSL_ENABLE_SESSION_TICKETS is set (BZ#1728261)
Enhancement(s):
-
Move IKEv1 and IKEv2 KDF's from libreswan to nss-softkn (BZ#1719628)
-
Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing this update, applications using NSS or NSPR (for example, Firefox) must be restarted for this update to take effect.
-
1719629 - zeroization of AES context missing [rhel-8.0.0.z] 1719630 - RSA Pairwise consistency test [rhel-8.0.0.z] 1722373 - FIPS updated for nss-softoken POST [rhel-8.0.0.z] 1722374 - DH/ECDH key tests missing for the PG parameters [rhel-8.0.0.z] 1725059 - NSS should implement continuous random test on it's seed data or use the kernel AF_ALG interface for random [rhel-8.0.0.z] 1725110 - support setting supported signature algorithms in strsclnt utility [rhel-8.0.0.z] 1725115 - certutil -F with no parameters is killed with segmentation fault message [rhel-8.0.0.z] 1725116 - NSS: Support for IKE/IPsec typical PKIX usage so libreswan can use nss without rejecting certs based on EKU [rhel-8.0.0.z] 1728259 - Wrong alert sent when client uses PKCS#1 signatures in TLS 1.3 [rhel-8.0.0.z] 1728260 - x25519 allowed in FIPS mode [rhel-8.0.0.z] 1728261 - post handshake authentication with selfserv does not work if SSL_ENABLE_SESSION_TICKETS is set [rhel-8.0.0.z] 1728436 - CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key 1728437 - CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault 1730988 - CVE-2019-11727 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3
-
Package List:
Red Hat Enterprise Linux AppStream (v. 8):
Source: nspr-4.21.0-2.el8_0.src.rpm nss-3.44.0-7.el8_0.src.rpm
aarch64: nspr-4.21.0-2.el8_0.aarch64.rpm nspr-debuginfo-4.21.0-2.el8_0.aarch64.rpm nspr-debugsource-4.21.0-2.el8_0.aarch64.rpm nspr-devel-4.21.0-2.el8_0.aarch64.rpm nss-3.44.0-7.el8_0.aarch64.rpm nss-debuginfo-3.44.0-7.el8_0.aarch64.rpm nss-debugsource-3.44.0-7.el8_0.aarch64.rpm nss-devel-3.44.0-7.el8_0.aarch64.rpm nss-softokn-3.44.0-7.el8_0.aarch64.rpm nss-softokn-debuginfo-3.44.0-7.el8_0.aarch64.rpm nss-softokn-devel-3.44.0-7.el8_0.aarch64.rpm nss-softokn-freebl-3.44.0-7.el8_0.aarch64.rpm nss-softokn-freebl-debuginfo-3.44.0-7.el8_0.aarch64.rpm nss-softokn-freebl-devel-3.44.0-7.el8_0.aarch64.rpm nss-sysinit-3.44.0-7.el8_0.aarch64.rpm nss-sysinit-debuginfo-3.44.0-7.el8_0.aarch64.rpm nss-tools-3.44.0-7.el8_0.aarch64.rpm nss-tools-debuginfo-3.44.0-7.el8_0.aarch64.rpm nss-util-3.44.0-7.el8_0.aarch64.rpm nss-util-debuginfo-3.44.0-7.el8_0.aarch64.rpm nss-util-devel-3.44.0-7.el8_0.aarch64.rpm
ppc64le: nspr-4.21.0-2.el8_0.ppc64le.rpm nspr-debuginfo-4.21.0-2.el8_0.ppc64le.rpm nspr-debugsource-4.21.0-2.el8_0.ppc64le.rpm nspr-devel-4.21.0-2.el8_0.ppc64le.rpm nss-3.44.0-7.el8_0.ppc64le.rpm nss-debuginfo-3.44.0-7.el8_0.ppc64le.rpm nss-debugsource-3.44.0-7.el8_0.ppc64le.rpm nss-devel-3.44.0-7.el8_0.ppc64le.rpm nss-softokn-3.44.0-7.el8_0.ppc64le.rpm nss-softokn-debuginfo-3.44.0-7.el8_0.ppc64le.rpm nss-softokn-devel-3.44.0-7.el8_0.ppc64le.rpm nss-softokn-freebl-3.44.0-7.el8_0.ppc64le.rpm nss-softokn-freebl-debuginfo-3.44.0-7.el8_0.ppc64le.rpm nss-softokn-freebl-devel-3.44.0-7.el8_0.ppc64le.rpm nss-sysinit-3.44.0-7.el8_0.ppc64le.rpm nss-sysinit-debuginfo-3.44.0-7.el8_0.ppc64le.rpm nss-tools-3.44.0-7.el8_0.ppc64le.rpm nss-tools-debuginfo-3.44.0-7.el8_0.ppc64le.rpm nss-util-3.44.0-7.el8_0.ppc64le.rpm nss-util-debuginfo-3.44.0-7.el8_0.ppc64le.rpm nss-util-devel-3.44.0-7.el8_0.ppc64le.rpm
s390x: nspr-4.21.0-2.el8_0.s390x.rpm nspr-debuginfo-4.21.0-2.el8_0.s390x.rpm nspr-debugsource-4.21.0-2.el8_0.s390x.rpm nspr-devel-4.21.0-2.el8_0.s390x.rpm nss-3.44.0-7.el8_0.s390x.rpm nss-debuginfo-3.44.0-7.el8_0.s390x.rpm nss-debugsource-3.44.0-7.el8_0.s390x.rpm nss-devel-3.44.0-7.el8_0.s390x.rpm nss-softokn-3.44.0-7.el8_0.s390x.rpm nss-softokn-debuginfo-3.44.0-7.el8_0.s390x.rpm nss-softokn-devel-3.44.0-7.el8_0.s390x.rpm nss-softokn-freebl-3.44.0-7.el8_0.s390x.rpm nss-softokn-freebl-debuginfo-3.44.0-7.el8_0.s390x.rpm nss-softokn-freebl-devel-3.44.0-7.el8_0.s390x.rpm nss-sysinit-3.44.0-7.el8_0.s390x.rpm nss-sysinit-debuginfo-3.44.0-7.el8_0.s390x.rpm nss-tools-3.44.0-7.el8_0.s390x.rpm nss-tools-debuginfo-3.44.0-7.el8_0.s390x.rpm nss-util-3.44.0-7.el8_0.s390x.rpm nss-util-debuginfo-3.44.0-7.el8_0.s390x.rpm nss-util-devel-3.44.0-7.el8_0.s390x.rpm
x86_64: nspr-4.21.0-2.el8_0.i686.rpm nspr-4.21.0-2.el8_0.x86_64.rpm nspr-debuginfo-4.21.0-2.el8_0.i686.rpm nspr-debuginfo-4.21.0-2.el8_0.x86_64.rpm nspr-debugsource-4.21.0-2.el8_0.i686.rpm nspr-debugsource-4.21.0-2.el8_0.x86_64.rpm nspr-devel-4.21.0-2.el8_0.i686.rpm nspr-devel-4.21.0-2.el8_0.x86_64.rpm nss-3.44.0-7.el8_0.i686.rpm nss-3.44.0-7.el8_0.x86_64.rpm nss-debuginfo-3.44.0-7.el8_0.i686.rpm nss-debuginfo-3.44.0-7.el8_0.x86_64.rpm nss-debugsource-3.44.0-7.el8_0.i686.rpm nss-debugsource-3.44.0-7.el8_0.x86_64.rpm nss-devel-3.44.0-7.el8_0.i686.rpm nss-devel-3.44.0-7.el8_0.x86_64.rpm nss-softokn-3.44.0-7.el8_0.i686.rpm nss-softokn-3.44.0-7.el8_0.x86_64.rpm nss-softokn-debuginfo-3.44.0-7.el8_0.i686.rpm nss-softokn-debuginfo-3.44.0-7.el8_0.x86_64.rpm nss-softokn-devel-3.44.0-7.el8_0.i686.rpm nss-softokn-devel-3.44.0-7.el8_0.x86_64.rpm nss-softokn-freebl-3.44.0-7.el8_0.i686.rpm nss-softokn-freebl-3.44.0-7.el8_0.x86_64.rpm nss-softokn-freebl-debuginfo-3.44.0-7.el8_0.i686.rpm nss-softokn-freebl-debuginfo-3.44.0-7.el8_0.x86_64.rpm nss-softokn-freebl-devel-3.44.0-7.el8_0.i686.rpm nss-softokn-freebl-devel-3.44.0-7.el8_0.x86_64.rpm nss-sysinit-3.44.0-7.el8_0.x86_64.rpm nss-sysinit-debuginfo-3.44.0-7.el8_0.i686.rpm nss-sysinit-debuginfo-3.44.0-7.el8_0.x86_64.rpm nss-tools-3.44.0-7.el8_0.x86_64.rpm nss-tools-debuginfo-3.44.0-7.el8_0.i686.rpm nss-tools-debuginfo-3.44.0-7.el8_0.x86_64.rpm nss-util-3.44.0-7.el8_0.i686.rpm nss-util-3.44.0-7.el8_0.x86_64.rpm nss-util-debuginfo-3.44.0-7.el8_0.i686.rpm nss-util-debuginfo-3.44.0-7.el8_0.x86_64.rpm nss-util-devel-3.44.0-7.el8_0.i686.rpm nss-util-devel-3.44.0-7.el8_0.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2018-18508 https://access.redhat.com/security/cve/CVE-2019-11719 https://access.redhat.com/security/cve/CVE-2019-11727 https://access.redhat.com/security/cve/CVE-2019-11729 https://access.redhat.com/security/updates/classification/#moderate
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBXUCfq9zjgjWX9erEAQjjQA/9HhUp+Cnfdn35f1x4Kj0gKkph2oaC9cEd QQu1wSlb6s/PjWx0dQUv0rAv4g/rhKfg2o0E1JgfkSPXeqtXVNKgGjC61VAXepnN kFRxD+Tbcf7+0XFuTk0wtKEaHs6Y6sBVpfV2V6EjHJJslRGCXSe9gh6Q/LXLzeOw Gk5g+6RuKlQ7K2xSeVE/V6jItXAXx6DRpFMPpUMQne1c4rCIsh1iW5n20Si2ftu9 dHDw8C0vNUm7Mdos+lZ+NbnagnEFiwmEcFsDXKFFE/TkU54io4rXJjslNNtUFUc4 1e4I8OVsrVvhLKRxcYSBpVT3HjUYwrwAMnK5oEDdvOnJMgq1ndq47ZcGsRpC4vC2 1+fahlwiEXHZmL/9/1Dx4ldsRVqVpjkMQu9YwPmHpGIukru4ZatZPmTnRO2tZ90C p26RCE31I+7tKLY7I0xSZWjYo7NpIRhwa54zeK3zGkvOfKUgXdcmmkCXhve1KHse FMSPXrTbfaKSYzTVwQLKYeOmMK1/kC6wKpcXVRl/InkCh1I1mgbJoX/XXLLjmiD9 HgxRo3YVpl/Yi8V9Gv432lXTpgYDorJwUV6tt29cRwldSKAv53JDk+gt6B9ELyKW 5HbVUbK3zi264QBEmTKHOH58j9Q+4juW/O8pnKVbI4a3w+sMxP0Sllmka98UPK3M soGsMntiCX0=fQiK -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202003-37
https://security.gentoo.org/
Severity: Normal Title: Mozilla Network Security Service: Multiple vulnerabilities Date: March 16, 2020 Bugs: #627534, #676868, #701840 ID: 202003-37
Synopsis
Multiple vulnerabilities have been found in Mozilla Network Security Service (NSS), the worst of which may lead to arbitrary code execution.
Background
The Mozilla Network Security Service (NSS) is a library implementing security features like SSL v.2/v.3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME and X.509 certificates. Please review the CVE identifiers referenced below for details.
Impact
An attacker could execute arbitrary code, cause a Denial of Service condition or have other unspecified impact.
Workaround
There is no known workaround at this time.
Resolution
All Mozilla Network Security Service (NSS) users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/nss-3.49"
References
[ 1 ] CVE-2017-11695 https://nvd.nist.gov/vuln/detail/CVE-2017-11695 [ 2 ] CVE-2017-11696 https://nvd.nist.gov/vuln/detail/CVE-2017-11696 [ 3 ] CVE-2017-11697 https://nvd.nist.gov/vuln/detail/CVE-2017-11697 [ 4 ] CVE-2017-11698 https://nvd.nist.gov/vuln/detail/CVE-2017-11698 [ 5 ] CVE-2018-18508 https://nvd.nist.gov/vuln/detail/CVE-2018-18508 [ 6 ] CVE-2019-11745 https://nvd.nist.gov/vuln/detail/CVE-2019-11745
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/202003-37
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2020 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
https://creativecommons.org/licenses/by-sa/2.5 . ========================================================================== Ubuntu Security Notice USN-3898-2 February 27, 2019
nss vulnerability
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 ESM
Summary:
NSS could be made to crash if it received specially crafted network traffic. This update provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
Hanno BAPck and Damian Poddebniak discovered that NSS incorrectly handled certain CMS functions
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202010-1059",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "network security services",
"scope": "lt",
"trust": 1.0,
"vendor": "mozilla",
"version": "3.36.7"
},
{
"model": "network security services",
"scope": "gte",
"trust": 1.0,
"vendor": "mozilla",
"version": "3.41"
},
{
"model": "ruggedcom rox rx1501",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "2.14.0"
},
{
"model": "ruggedcom rox rx1400",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "2.14.0"
},
{
"model": "ruggedcom rox rx1510",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "2.14.0"
},
{
"model": "ruggedcom rox rx1500",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "2.14.0"
},
{
"model": "ruggedcom rox mx5000",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "2.14.0"
},
{
"model": "ruggedcom rox rx5000",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "2.14.0"
},
{
"model": "ruggedcom rox rx1512",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "2.14.0"
},
{
"model": "network security services",
"scope": "lt",
"trust": 1.0,
"vendor": "mozilla",
"version": "3.41.1"
},
{
"model": "ruggedcom rox rx1511",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "2.14.0"
},
{
"model": "network security services",
"scope": null,
"trust": 0.8,
"vendor": "mozilla",
"version": null
},
{
"model": "ruggedcom rox mx5000",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "ruggedcom rox rx1400",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "ruggedcom rox rx1500",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "ruggedcom rox rx1501",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "ruggedcom rox rx1510",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "ruggedcom rox rx1511",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "ruggedcom rox rx1512",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "ruggedcom rox rx5000",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "linux",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "18.10"
},
{
"model": "linux lts",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "18.04"
},
{
"model": "linux lts",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "16.04"
},
{
"model": "linux lts",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "14.04"
},
{
"model": "linux esm",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "12.04"
},
{
"model": "virtualization",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "4"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "7"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "5"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.40.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.37.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.36.5"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.28.4"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.28"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.21.4"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.21.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.20.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.20.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.19.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.17.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.17.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.15.4"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.15.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.15.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.15.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.14.5"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.14.4"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.10"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.8"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.5"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.4"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.11.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.9.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.9"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.8"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.7.7"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.7.5"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.7.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.7.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.7.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.7"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.6.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.6"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.5"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.4.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.4.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.4"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.3.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.3.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.2.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.41"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.40"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.39"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.38"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.37"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.36"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.24.0"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.23"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.21"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.20"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.19.2.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.17"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.16.5"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.16.2.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.16"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.15.5"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.15.3.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.15"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.14.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.14.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.14.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.14"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.13.4"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.13.3"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.9"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.7"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.6"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.3.2"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.3.1"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12.11"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.12"
},
{
"model": "network security services",
"scope": "eq",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.11"
},
{
"model": "network security services",
"scope": "ne",
"trust": 0.3,
"vendor": "mozilla",
"version": "3.41.1"
}
],
"sources": [
{
"db": "BID",
"id": "107257"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"db": "NVD",
"id": "CVE-2018-18508"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.36.7",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.41.1",
"versionStartIncluding": "3.41",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_mx5000_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_mx5000:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1400_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1400:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1500_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1500:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1501_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1501:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1510_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1510:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1511_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1511:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx1512_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx1512:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rox_rx5000_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rox_rx5000:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2018-18508"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ubuntu,Red Hat,Gentoo",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
],
"trust": 0.6
},
"cve": "CVE-2018-18508",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 4.3,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-18508",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 6.5,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-18508",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2018-18508",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201902-594",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2018-18508",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2018-18508"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"db": "NVD",
"id": "CVE-2018-18508"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service. \nAttackers can exploit this issue to crash the application, resulting in a denial-of-service condition. \nMozilla Network Security Services versions prior to 3.41.1 are vulnerable. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n==================================================================== \nRed Hat Security Advisory\n\nSynopsis: Moderate: nss and nspr security, bug fix, and enhancement update\nAdvisory ID: RHSA-2019:1951-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://access.redhat.com/errata/RHSA-2019:1951\nIssue date: 2019-07-30\nCVE Names: CVE-2018-18508 CVE-2019-11719 CVE-2019-11727\n CVE-2019-11729\n====================================================================\n1. Summary:\n\nAn update for nss and nspr is now available for Red Hat Enterprise Linux 8. \n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64\n\n3. Description:\n\nNetwork Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. \n\nNetscape Portable Runtime (NSPR) provides platform independence for non-GUI\noperating system facilities. \n\nThe following packages have been upgraded to a later upstream version: nss\n(3.44.0), nspr (4.21.0). (BZ#1713187, BZ#1713188)\n\nSecurity Fix(es):\n\n* nss: NULL pointer dereference in several CMS functions resulting in a\ndenial of service (CVE-2018-18508)\n\n* nss: Out-of-bounds read when importing curve25519 private key\n(CVE-2019-11719)\n\n* nss: Empty or malformed p256-ECDH public keys may trigger a segmentation\nfault (CVE-2019-11729)\n\n* nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\nBug Fix(es):\n\n* PQG verify fails when create DSA PQG parameters because the counts aren\u0027t\nreturned correctly. (BZ#1685325)\n\n* zeroization of AES context missing (BZ#1719629)\n\n* RSA Pairwise consistency test (BZ#1719630)\n\n* FIPS updated for nss-softoken POST (BZ#1722373)\n\n* DH/ECDH key tests missing for the PG parameters (BZ#1722374)\n\n* NSS should implement continuous random test on it\u0027s seed data or use the\nkernel AF_ALG interface for random (BZ#1725059)\n\n* support setting supported signature algorithms in strsclnt utility\n(BZ#1725110)\n\n* certutil -F with no parameters is killed with segmentation fault message\n(BZ#1725115)\n\n* NSS: Support for IKE/IPsec typical PKIX usage so libreswan can use nss\nwithout rejecting certs based on EKU (BZ#1725116)\n\n* NSS should use getentropy() for seeding its RNG, not /dev/urandom. Needs\nupdate to NSS 3.37 (BZ#1725117)\n\n* Disable TLS 1.3 in FIPS mode (BZ#1725773)\n\n* Wrong alert sent when client uses PKCS#1 signatures in TLS 1.3\n(BZ#1728259)\n\n* x25519 allowed in FIPS mode (BZ#1728260)\n\n* post handshake authentication with selfserv does not work if\nSSL_ENABLE_SESSION_TICKETS is set (BZ#1728261)\n\nEnhancement(s):\n\n* Move IKEv1 and IKEv2 KDF\u0027s from libreswan to nss-softkn (BZ#1719628)\n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS or NSPR (for example,\nFirefox) must be restarted for this update to take effect. \n\n5. \n1719629 - zeroization of AES context missing [rhel-8.0.0.z]\n1719630 - RSA Pairwise consistency test [rhel-8.0.0.z]\n1722373 - FIPS updated for nss-softoken POST [rhel-8.0.0.z]\n1722374 - DH/ECDH key tests missing for the PG parameters [rhel-8.0.0.z]\n1725059 - NSS should implement continuous random test on it\u0027s seed data or use the kernel AF_ALG interface for random [rhel-8.0.0.z]\n1725110 - support setting supported signature algorithms in strsclnt utility [rhel-8.0.0.z]\n1725115 - certutil -F with no parameters is killed with segmentation fault message [rhel-8.0.0.z]\n1725116 - NSS: Support for IKE/IPsec typical PKIX usage so libreswan can use nss without rejecting certs based on EKU [rhel-8.0.0.z]\n1728259 - Wrong alert sent when client uses PKCS#1 signatures in TLS 1.3 [rhel-8.0.0.z]\n1728260 - x25519 allowed in FIPS mode [rhel-8.0.0.z]\n1728261 - post handshake authentication with selfserv does not work if SSL_ENABLE_SESSION_TICKETS is set [rhel-8.0.0.z]\n1728436 - CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key\n1728437 - CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault\n1730988 - CVE-2019-11727 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3\n\n6. Package List:\n\nRed Hat Enterprise Linux AppStream (v. 8):\n\nSource:\nnspr-4.21.0-2.el8_0.src.rpm\nnss-3.44.0-7.el8_0.src.rpm\n\naarch64:\nnspr-4.21.0-2.el8_0.aarch64.rpm\nnspr-debuginfo-4.21.0-2.el8_0.aarch64.rpm\nnspr-debugsource-4.21.0-2.el8_0.aarch64.rpm\nnspr-devel-4.21.0-2.el8_0.aarch64.rpm\nnss-3.44.0-7.el8_0.aarch64.rpm\nnss-debuginfo-3.44.0-7.el8_0.aarch64.rpm\nnss-debugsource-3.44.0-7.el8_0.aarch64.rpm\nnss-devel-3.44.0-7.el8_0.aarch64.rpm\nnss-softokn-3.44.0-7.el8_0.aarch64.rpm\nnss-softokn-debuginfo-3.44.0-7.el8_0.aarch64.rpm\nnss-softokn-devel-3.44.0-7.el8_0.aarch64.rpm\nnss-softokn-freebl-3.44.0-7.el8_0.aarch64.rpm\nnss-softokn-freebl-debuginfo-3.44.0-7.el8_0.aarch64.rpm\nnss-softokn-freebl-devel-3.44.0-7.el8_0.aarch64.rpm\nnss-sysinit-3.44.0-7.el8_0.aarch64.rpm\nnss-sysinit-debuginfo-3.44.0-7.el8_0.aarch64.rpm\nnss-tools-3.44.0-7.el8_0.aarch64.rpm\nnss-tools-debuginfo-3.44.0-7.el8_0.aarch64.rpm\nnss-util-3.44.0-7.el8_0.aarch64.rpm\nnss-util-debuginfo-3.44.0-7.el8_0.aarch64.rpm\nnss-util-devel-3.44.0-7.el8_0.aarch64.rpm\n\nppc64le:\nnspr-4.21.0-2.el8_0.ppc64le.rpm\nnspr-debuginfo-4.21.0-2.el8_0.ppc64le.rpm\nnspr-debugsource-4.21.0-2.el8_0.ppc64le.rpm\nnspr-devel-4.21.0-2.el8_0.ppc64le.rpm\nnss-3.44.0-7.el8_0.ppc64le.rpm\nnss-debuginfo-3.44.0-7.el8_0.ppc64le.rpm\nnss-debugsource-3.44.0-7.el8_0.ppc64le.rpm\nnss-devel-3.44.0-7.el8_0.ppc64le.rpm\nnss-softokn-3.44.0-7.el8_0.ppc64le.rpm\nnss-softokn-debuginfo-3.44.0-7.el8_0.ppc64le.rpm\nnss-softokn-devel-3.44.0-7.el8_0.ppc64le.rpm\nnss-softokn-freebl-3.44.0-7.el8_0.ppc64le.rpm\nnss-softokn-freebl-debuginfo-3.44.0-7.el8_0.ppc64le.rpm\nnss-softokn-freebl-devel-3.44.0-7.el8_0.ppc64le.rpm\nnss-sysinit-3.44.0-7.el8_0.ppc64le.rpm\nnss-sysinit-debuginfo-3.44.0-7.el8_0.ppc64le.rpm\nnss-tools-3.44.0-7.el8_0.ppc64le.rpm\nnss-tools-debuginfo-3.44.0-7.el8_0.ppc64le.rpm\nnss-util-3.44.0-7.el8_0.ppc64le.rpm\nnss-util-debuginfo-3.44.0-7.el8_0.ppc64le.rpm\nnss-util-devel-3.44.0-7.el8_0.ppc64le.rpm\n\ns390x:\nnspr-4.21.0-2.el8_0.s390x.rpm\nnspr-debuginfo-4.21.0-2.el8_0.s390x.rpm\nnspr-debugsource-4.21.0-2.el8_0.s390x.rpm\nnspr-devel-4.21.0-2.el8_0.s390x.rpm\nnss-3.44.0-7.el8_0.s390x.rpm\nnss-debuginfo-3.44.0-7.el8_0.s390x.rpm\nnss-debugsource-3.44.0-7.el8_0.s390x.rpm\nnss-devel-3.44.0-7.el8_0.s390x.rpm\nnss-softokn-3.44.0-7.el8_0.s390x.rpm\nnss-softokn-debuginfo-3.44.0-7.el8_0.s390x.rpm\nnss-softokn-devel-3.44.0-7.el8_0.s390x.rpm\nnss-softokn-freebl-3.44.0-7.el8_0.s390x.rpm\nnss-softokn-freebl-debuginfo-3.44.0-7.el8_0.s390x.rpm\nnss-softokn-freebl-devel-3.44.0-7.el8_0.s390x.rpm\nnss-sysinit-3.44.0-7.el8_0.s390x.rpm\nnss-sysinit-debuginfo-3.44.0-7.el8_0.s390x.rpm\nnss-tools-3.44.0-7.el8_0.s390x.rpm\nnss-tools-debuginfo-3.44.0-7.el8_0.s390x.rpm\nnss-util-3.44.0-7.el8_0.s390x.rpm\nnss-util-debuginfo-3.44.0-7.el8_0.s390x.rpm\nnss-util-devel-3.44.0-7.el8_0.s390x.rpm\n\nx86_64:\nnspr-4.21.0-2.el8_0.i686.rpm\nnspr-4.21.0-2.el8_0.x86_64.rpm\nnspr-debuginfo-4.21.0-2.el8_0.i686.rpm\nnspr-debuginfo-4.21.0-2.el8_0.x86_64.rpm\nnspr-debugsource-4.21.0-2.el8_0.i686.rpm\nnspr-debugsource-4.21.0-2.el8_0.x86_64.rpm\nnspr-devel-4.21.0-2.el8_0.i686.rpm\nnspr-devel-4.21.0-2.el8_0.x86_64.rpm\nnss-3.44.0-7.el8_0.i686.rpm\nnss-3.44.0-7.el8_0.x86_64.rpm\nnss-debuginfo-3.44.0-7.el8_0.i686.rpm\nnss-debuginfo-3.44.0-7.el8_0.x86_64.rpm\nnss-debugsource-3.44.0-7.el8_0.i686.rpm\nnss-debugsource-3.44.0-7.el8_0.x86_64.rpm\nnss-devel-3.44.0-7.el8_0.i686.rpm\nnss-devel-3.44.0-7.el8_0.x86_64.rpm\nnss-softokn-3.44.0-7.el8_0.i686.rpm\nnss-softokn-3.44.0-7.el8_0.x86_64.rpm\nnss-softokn-debuginfo-3.44.0-7.el8_0.i686.rpm\nnss-softokn-debuginfo-3.44.0-7.el8_0.x86_64.rpm\nnss-softokn-devel-3.44.0-7.el8_0.i686.rpm\nnss-softokn-devel-3.44.0-7.el8_0.x86_64.rpm\nnss-softokn-freebl-3.44.0-7.el8_0.i686.rpm\nnss-softokn-freebl-3.44.0-7.el8_0.x86_64.rpm\nnss-softokn-freebl-debuginfo-3.44.0-7.el8_0.i686.rpm\nnss-softokn-freebl-debuginfo-3.44.0-7.el8_0.x86_64.rpm\nnss-softokn-freebl-devel-3.44.0-7.el8_0.i686.rpm\nnss-softokn-freebl-devel-3.44.0-7.el8_0.x86_64.rpm\nnss-sysinit-3.44.0-7.el8_0.x86_64.rpm\nnss-sysinit-debuginfo-3.44.0-7.el8_0.i686.rpm\nnss-sysinit-debuginfo-3.44.0-7.el8_0.x86_64.rpm\nnss-tools-3.44.0-7.el8_0.x86_64.rpm\nnss-tools-debuginfo-3.44.0-7.el8_0.i686.rpm\nnss-tools-debuginfo-3.44.0-7.el8_0.x86_64.rpm\nnss-util-3.44.0-7.el8_0.i686.rpm\nnss-util-3.44.0-7.el8_0.x86_64.rpm\nnss-util-debuginfo-3.44.0-7.el8_0.i686.rpm\nnss-util-debuginfo-3.44.0-7.el8_0.x86_64.rpm\nnss-util-devel-3.44.0-7.el8_0.i686.rpm\nnss-util-devel-3.44.0-7.el8_0.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2018-18508\nhttps://access.redhat.com/security/cve/CVE-2019-11719\nhttps://access.redhat.com/security/cve/CVE-2019-11727\nhttps://access.redhat.com/security/cve/CVE-2019-11729\nhttps://access.redhat.com/security/updates/classification/#moderate\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2019 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niQIVAwUBXUCfq9zjgjWX9erEAQjjQA/9HhUp+Cnfdn35f1x4Kj0gKkph2oaC9cEd\nQQu1wSlb6s/PjWx0dQUv0rAv4g/rhKfg2o0E1JgfkSPXeqtXVNKgGjC61VAXepnN\nkFRxD+Tbcf7+0XFuTk0wtKEaHs6Y6sBVpfV2V6EjHJJslRGCXSe9gh6Q/LXLzeOw\nGk5g+6RuKlQ7K2xSeVE/V6jItXAXx6DRpFMPpUMQne1c4rCIsh1iW5n20Si2ftu9\ndHDw8C0vNUm7Mdos+lZ+NbnagnEFiwmEcFsDXKFFE/TkU54io4rXJjslNNtUFUc4\n1e4I8OVsrVvhLKRxcYSBpVT3HjUYwrwAMnK5oEDdvOnJMgq1ndq47ZcGsRpC4vC2\n1+fahlwiEXHZmL/9/1Dx4ldsRVqVpjkMQu9YwPmHpGIukru4ZatZPmTnRO2tZ90C\np26RCE31I+7tKLY7I0xSZWjYo7NpIRhwa54zeK3zGkvOfKUgXdcmmkCXhve1KHse\nFMSPXrTbfaKSYzTVwQLKYeOmMK1/kC6wKpcXVRl/InkCh1I1mgbJoX/XXLLjmiD9\nHgxRo3YVpl/Yi8V9Gv432lXTpgYDorJwUV6tt29cRwldSKAv53JDk+gt6B9ELyKW\n5HbVUbK3zi264QBEmTKHOH58j9Q+4juW/O8pnKVbI4a3w+sMxP0Sllmka98UPK3M\nsoGsMntiCX0=fQiK\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 202003-37\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n https://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n Title: Mozilla Network Security Service: Multiple vulnerabilities\n Date: March 16, 2020\n Bugs: #627534, #676868, #701840\n ID: 202003-37\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in Mozilla Network Security\nService (NSS), the worst of which may lead to arbitrary code execution. \n\nBackground\n==========\n\nThe Mozilla Network Security Service (NSS) is a library implementing\nsecurity features like SSL v.2/v.3, TLS, PKCS #5, PKCS #7, PKCS #11,\nPKCS #12, S/MIME and X.509 certificates. Please review the CVE identifiers referenced\nbelow for details. \n\nImpact\n======\n\nAn attacker could execute arbitrary code, cause a Denial of Service\ncondition or have other unspecified impact. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Mozilla Network Security Service (NSS) users should upgrade to the\nlatest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=dev-libs/nss-3.49\"\n\nReferences\n==========\n\n[ 1 ] CVE-2017-11695\n https://nvd.nist.gov/vuln/detail/CVE-2017-11695\n[ 2 ] CVE-2017-11696\n https://nvd.nist.gov/vuln/detail/CVE-2017-11696\n[ 3 ] CVE-2017-11697\n https://nvd.nist.gov/vuln/detail/CVE-2017-11697\n[ 4 ] CVE-2017-11698\n https://nvd.nist.gov/vuln/detail/CVE-2017-11698\n[ 5 ] CVE-2018-18508\n https://nvd.nist.gov/vuln/detail/CVE-2018-18508\n[ 6 ] CVE-2019-11745\n https://nvd.nist.gov/vuln/detail/CVE-2019-11745\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/202003-37\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2020 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttps://creativecommons.org/licenses/by-sa/2.5\n. ==========================================================================\nUbuntu Security Notice USN-3898-2\nFebruary 27, 2019\n\nnss vulnerability\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 12.04 ESM\n\nSummary:\n\nNSS could be made to crash if it received specially crafted network\ntraffic. This update provides\nthe corresponding update for Ubuntu 12.04 ESM. \n\nOriginal advisory details:\n\n Hanno BAPck and Damian Poddebniak discovered that NSS incorrectly\n handled certain CMS functions",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-18508"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"db": "BID",
"id": "107257"
},
{
"db": "VULMON",
"id": "CVE-2018-18508"
},
{
"db": "PACKETSTORM",
"id": "153834"
},
{
"db": "PACKETSTORM",
"id": "156770"
},
{
"db": "PACKETSTORM",
"id": "151881"
},
{
"db": "PACKETSTORM",
"id": "151880"
}
],
"trust": 2.34
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-18508",
"trust": 3.2
},
{
"db": "ICS CERT",
"id": "ICSA-21-040-04",
"trust": 1.6
},
{
"db": "SIEMENS",
"id": "SSA-379803",
"trust": 1.6
},
{
"db": "JVN",
"id": "JVNVU91083521",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016512",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "153834",
"trust": 0.7
},
{
"db": "PACKETSTORM",
"id": "156770",
"trust": 0.7
},
{
"db": "PACKETSTORM",
"id": "151881",
"trust": 0.7
},
{
"db": "AUSCERT",
"id": "ESB-2021.0491",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2020.0001",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2020.3355",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.2864",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.0683",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201902-594",
"trust": 0.6
},
{
"db": "BID",
"id": "107257",
"trust": 0.3
},
{
"db": "VULMON",
"id": "CVE-2018-18508",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "151880",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2018-18508"
},
{
"db": "BID",
"id": "107257"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"db": "PACKETSTORM",
"id": "153834"
},
{
"db": "PACKETSTORM",
"id": "156770"
},
{
"db": "PACKETSTORM",
"id": "151881"
},
{
"db": "PACKETSTORM",
"id": "151880"
},
{
"db": "NVD",
"id": "CVE-2018-18508"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
]
},
"id": "VAR-202010-1059",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.52540106
},
"last_update_date": "2023-12-18T11:09:17.882000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SSA-379803",
"trust": 0.8,
"url": "https://developer.mozilla.org/en-us/docs/mozilla/projects/nss/nss_3.36.7_release_notes"
},
{
"title": "nss Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=89391"
},
{
"title": "Debian CVElist Bug Report Logs: nss: CVE-2018-18508: NULL pointer dereference in several CMS functions resulting in a denial of service",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=cf52b51fc0bbd2d3441029e3dfb6b203"
},
{
"title": "Red Hat: Moderate: nss and nspr security, bug fix, and enhancement update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20191951 - security advisory"
},
{
"title": "Ubuntu Security Notice: nss vulnerability",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3898-1"
},
{
"title": "Ubuntu Security Notice: nss vulnerability",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3898-2"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2018-18508"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-476",
"trust": 1.0
},
{
"problemtype": "NULL Pointer dereference (CWE-476) [NVD Evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"db": "NVD",
"id": "CVE-2018-18508"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
},
{
"trust": 2.0,
"url": "https://developer.mozilla.org/en-us/docs/mozilla/projects/nss/nss_3.41.1_release_notes"
},
{
"trust": 1.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-18508"
},
{
"trust": 1.7,
"url": "https://developer.mozilla.org/en-us/docs/mozilla/projects/nss/nss_3.36.7_release_notes"
},
{
"trust": 1.6,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
},
{
"trust": 0.8,
"url": "https://jvn.jp/vu/jvnvu91083521/"
},
{
"trust": 0.7,
"url": "https://access.redhat.com/errata/rhsa-2019:1951"
},
{
"trust": 0.6,
"url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00006.html"
},
{
"trust": 0.6,
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193395-1.html"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2021.0491"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/156770/gentoo-linux-security-advisory-202003-37.html"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/153834/red-hat-security-advisory-2019-1951-01.html"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/151881/ubuntu-security-notice-usn-3898-2.html"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2020.3355/"
},
{
"trust": 0.6,
"url": "https://vigilance.fr/vulnerability/mozilla-nss-null-pointer-dereference-via-cms-28417"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2019.2864/"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2020.0001/"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/76506"
},
{
"trust": 0.4,
"url": "https://usn.ubuntu.com/3898-1/"
},
{
"trust": 0.4,
"url": "https://access.redhat.com/security/cve/cve-2018-18508"
},
{
"trust": 0.3,
"url": "https://hg.mozilla.org/projects/nss/rev/5e70b72131ac"
},
{
"trust": 0.3,
"url": "https://hg.mozilla.org/projects/nss/rev/08d1b0c1117f"
},
{
"trust": 0.3,
"url": "http://www.mozilla.com/en-us/"
},
{
"trust": 0.3,
"url": "https://ftp.mozilla.org/pub/security/nss/releases/nss_3_41_1_rtm/src/"
},
{
"trust": 0.3,
"url": "https://developer.mozilla.org/en-us/docs/mozilla/projects/nss"
},
{
"trust": 0.3,
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=cve-2018-18508"
},
{
"trust": 0.3,
"url": "https://usn.ubuntu.com/3898-2/"
},
{
"trust": 0.2,
"url": "https://usn.ubuntu.com/usn/usn-3898-1"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/476.html"
},
{
"trust": 0.1,
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921614"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-11729"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-11727"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2019-11729"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2019-11719"
},
{
"trust": 0.1,
"url": "https://bugzilla.redhat.com/):"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/team/key/"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/articles/11258"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2019-11727"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-11719"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-11696"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-11745"
},
{
"trust": 0.1,
"url": "https://security.gentoo.org/glsa/202003-37"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-11695"
},
{
"trust": 0.1,
"url": "https://bugs.gentoo.org."
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-11697"
},
{
"trust": 0.1,
"url": "https://creativecommons.org/licenses/by-sa/2.5"
},
{
"trust": 0.1,
"url": "https://security.gentoo.org/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-11698"
},
{
"trust": 0.1,
"url": "https://usn.ubuntu.com/usn/usn-3898-2"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.14.04.5"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.5"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/nss/2:3.35-2ubuntu2.2"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/nss/2:3.36.1-1ubuntu1.2"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2018-18508"
},
{
"db": "BID",
"id": "107257"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"db": "PACKETSTORM",
"id": "153834"
},
{
"db": "PACKETSTORM",
"id": "156770"
},
{
"db": "PACKETSTORM",
"id": "151881"
},
{
"db": "PACKETSTORM",
"id": "151880"
},
{
"db": "NVD",
"id": "CVE-2018-18508"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULMON",
"id": "CVE-2018-18508"
},
{
"db": "BID",
"id": "107257"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"db": "PACKETSTORM",
"id": "153834"
},
{
"db": "PACKETSTORM",
"id": "156770"
},
{
"db": "PACKETSTORM",
"id": "151881"
},
{
"db": "PACKETSTORM",
"id": "151880"
},
{
"db": "NVD",
"id": "CVE-2018-18508"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-10-22T00:00:00",
"db": "VULMON",
"id": "CVE-2018-18508"
},
{
"date": "2019-01-22T00:00:00",
"db": "BID",
"id": "107257"
},
{
"date": "2021-05-24T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"date": "2019-07-30T22:08:23",
"db": "PACKETSTORM",
"id": "153834"
},
{
"date": "2020-03-16T22:35:27",
"db": "PACKETSTORM",
"id": "156770"
},
{
"date": "2019-02-27T19:23:00",
"db": "PACKETSTORM",
"id": "151881"
},
{
"date": "2019-02-27T19:22:00",
"db": "PACKETSTORM",
"id": "151880"
},
{
"date": "2020-10-22T21:15:12.467000",
"db": "NVD",
"id": "CVE-2018-18508"
},
{
"date": "2019-02-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-02-18T00:00:00",
"db": "VULMON",
"id": "CVE-2018-18508"
},
{
"date": "2019-01-22T00:00:00",
"db": "BID",
"id": "107257"
},
{
"date": "2021-05-24T08:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-016512"
},
{
"date": "2021-02-18T15:20:57.460000",
"db": "NVD",
"id": "CVE-2018-18508"
},
{
"date": "2021-08-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "151881"
},
{
"db": "PACKETSTORM",
"id": "151880"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
],
"trust": 0.8
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Network\u00a0Security\u00a0Services\u00a0 In \u00a0NULL\u00a0 Pointer dereference vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-016512"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "code problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201902-594"
}
],
"trust": 0.6
}
}
rhsa-2019_1951
Vulnerability from csaf_redhat
Published
2019-07-30 19:50
Modified
2024-09-16 02:35
Summary
Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update
Notes
Topic
An update for nss and nspr is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.
The following packages have been upgraded to a later upstream version: nss (3.44.0), nspr (4.21.0). (BZ#1713187, BZ#1713188)
Security Fix(es):
* nss: NULL pointer dereference in several CMS functions resulting in a denial of service (CVE-2018-18508)
* nss: Out-of-bounds read when importing curve25519 private key (CVE-2019-11719)
* nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)
* nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* PQG verify fails when create DSA PQG parameters because the counts aren't returned correctly. (BZ#1685325)
* zeroization of AES context missing (BZ#1719629)
* RSA Pairwise consistency test (BZ#1719630)
* FIPS updated for nss-softoken POST (BZ#1722373)
* DH/ECDH key tests missing for the PG parameters (BZ#1722374)
* NSS should implement continuous random test on it's seed data or use the kernel AF_ALG interface for random (BZ#1725059)
* support setting supported signature algorithms in strsclnt utility (BZ#1725110)
* certutil -F with no parameters is killed with segmentation fault message (BZ#1725115)
* NSS: Support for IKE/IPsec typical PKIX usage so libreswan can use nss without rejecting certs based on EKU (BZ#1725116)
* NSS should use getentropy() for seeding its RNG, not /dev/urandom. Needs update to NSS 3.37 (BZ#1725117)
* Disable TLS 1.3 in FIPS mode (BZ#1725773)
* Wrong alert sent when client uses PKCS#1 signatures in TLS 1.3 (BZ#1728259)
* x25519 allowed in FIPS mode (BZ#1728260)
* post handshake authentication with selfserv does not work if SSL_ENABLE_SESSION_TICKETS is set (BZ#1728261)
Enhancement(s):
* Move IKEv1 and IKEv2 KDF's from libreswan to nss-softkn (BZ#1719628)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nss and nspr is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.\n\nNetscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.\n\nThe following packages have been upgraded to a later upstream version: nss (3.44.0), nspr (4.21.0). (BZ#1713187, BZ#1713188)\n\nSecurity Fix(es):\n\n* nss: NULL pointer dereference in several CMS functions resulting in a denial of service (CVE-2018-18508)\n\n* nss: Out-of-bounds read when importing curve25519 private key (CVE-2019-11719)\n\n* nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)\n\n* nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* PQG verify fails when create DSA PQG parameters because the counts aren\u0027t returned correctly. (BZ#1685325)\n\n* zeroization of AES context missing (BZ#1719629)\n\n* RSA Pairwise consistency test (BZ#1719630)\n\n* FIPS updated for nss-softoken POST (BZ#1722373)\n\n* DH/ECDH key tests missing for the PG parameters (BZ#1722374)\n\n* NSS should implement continuous random test on it\u0027s seed data or use the kernel AF_ALG interface for random (BZ#1725059)\n\n* support setting supported signature algorithms in strsclnt utility (BZ#1725110)\n\n* certutil -F with no parameters is killed with segmentation fault message (BZ#1725115)\n\n* NSS: Support for IKE/IPsec typical PKIX usage so libreswan can use nss without rejecting certs based on EKU (BZ#1725116)\n\n* NSS should use getentropy() for seeding its RNG, not /dev/urandom. Needs update to NSS 3.37 (BZ#1725117)\n\n* Disable TLS 1.3 in FIPS mode (BZ#1725773)\n\n* Wrong alert sent when client uses PKCS#1 signatures in TLS 1.3 (BZ#1728259)\n\n* x25519 allowed in FIPS mode (BZ#1728260)\n\n* post handshake authentication with selfserv does not work if SSL_ENABLE_SESSION_TICKETS is set (BZ#1728261)\n\nEnhancement(s):\n\n* Move IKEv1 and IKEv2 KDF\u0027s from libreswan to nss-softkn (BZ#1719628)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1951",
"url": "https://access.redhat.com/errata/RHSA-2019:1951"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1671310",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671310"
},
{
"category": "external",
"summary": "1685325",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1685325"
},
{
"category": "external",
"summary": "1719629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719629"
},
{
"category": "external",
"summary": "1719630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719630"
},
{
"category": "external",
"summary": "1722373",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1722373"
},
{
"category": "external",
"summary": "1722374",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1722374"
},
{
"category": "external",
"summary": "1725059",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725059"
},
{
"category": "external",
"summary": "1725110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725110"
},
{
"category": "external",
"summary": "1725115",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725115"
},
{
"category": "external",
"summary": "1725116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725116"
},
{
"category": "external",
"summary": "1728259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728259"
},
{
"category": "external",
"summary": "1728260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728260"
},
{
"category": "external",
"summary": "1728261",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728261"
},
{
"category": "external",
"summary": "1728436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728436"
},
{
"category": "external",
"summary": "1728437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728437"
},
{
"category": "external",
"summary": "1730988",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730988"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2019/rhsa-2019_1951.json"
}
],
"title": "Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-09-16T02:35:58+00:00",
"generator": {
"date": "2024-09-16T02:35:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "3.33.3"
}
},
"id": "RHSA-2019:1951",
"initial_release_date": "2019-07-30T19:50:55+00:00",
"revision_history": [
{
"date": "2019-07-30T19:50:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-07-30T19:50:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-09-16T02:35:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"product": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"product_id": "nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.21.0-2.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"product": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"product_id": "nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debugsource@4.21.0-2.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.21.0-2.el8_0.aarch64",
"product": {
"name": "nspr-devel-0:4.21.0-2.el8_0.aarch64",
"product_id": "nspr-devel-0:4.21.0-2.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.21.0-2.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.21.0-2.el8_0.aarch64",
"product": {
"name": "nspr-0:4.21.0-2.el8_0.aarch64",
"product_id": "nspr-0:4.21.0-2.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.21.0-2.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-util-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-util-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-softokn-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-softokn-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-tools-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-tools-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-devel-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-devel-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.44.0-7.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"product": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"product_id": "nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.44.0-7.el8_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"product": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"product_id": "nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.21.0-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"product": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"product_id": "nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debugsource@4.21.0-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.21.0-2.el8_0.x86_64",
"product": {
"name": "nspr-devel-0:4.21.0-2.el8_0.x86_64",
"product_id": "nspr-devel-0:4.21.0-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.21.0-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.21.0-2.el8_0.x86_64",
"product": {
"name": "nspr-0:4.21.0-2.el8_0.x86_64",
"product_id": "nspr-0:4.21.0-2.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.21.0-2.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-util-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-util-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-softokn-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-softokn-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-tools-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-tools-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-util-devel-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-devel-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-devel-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.44.0-7.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"product": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"product_id": "nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.44.0-7.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"product": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"product_id": "nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.21.0-2.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nspr-debugsource-0:4.21.0-2.el8_0.i686",
"product": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.i686",
"product_id": "nspr-debugsource-0:4.21.0-2.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debugsource@4.21.0-2.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.21.0-2.el8_0.i686",
"product": {
"name": "nspr-devel-0:4.21.0-2.el8_0.i686",
"product_id": "nspr-devel-0:4.21.0-2.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.21.0-2.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.21.0-2.el8_0.i686",
"product": {
"name": "nspr-0:4.21.0-2.el8_0.i686",
"product_id": "nspr-0:4.21.0-2.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.21.0-2.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"product_id": "nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-util-0:3.44.0-7.el8_0.i686",
"product_id": "nss-util-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"product_id": "nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-0:3.44.0-7.el8_0.i686",
"product_id": "nss-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"product_id": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.i686",
"product_id": "nss-debugsource-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.i686",
"product_id": "nss-debuginfo-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-softokn-0:3.44.0-7.el8_0.i686",
"product_id": "nss-softokn-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"product_id": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.i686",
"product_id": "nss-util-devel-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"product_id": "nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"product_id": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-devel-0:3.44.0-7.el8_0.i686",
"product_id": "nss-devel-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"product_id": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.44.0-7.el8_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"product": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"product_id": "nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.44.0-7.el8_0?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"product": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"product_id": "nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.21.0-2.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"product": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"product_id": "nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debugsource@4.21.0-2.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.21.0-2.el8_0.s390x",
"product": {
"name": "nspr-devel-0:4.21.0-2.el8_0.s390x",
"product_id": "nspr-devel-0:4.21.0-2.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.21.0-2.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.21.0-2.el8_0.s390x",
"product": {
"name": "nspr-0:4.21.0-2.el8_0.s390x",
"product_id": "nspr-0:4.21.0-2.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.21.0-2.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-util-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-util-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-debugsource-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-softokn-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-softokn-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-tools-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-tools-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-util-devel-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-sysinit-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-sysinit-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-devel-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-devel-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.44.0-7.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"product": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"product_id": "nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.44.0-7.el8_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"product": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"product_id": "nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debuginfo@4.21.0-2.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"product": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"product_id": "nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-debugsource@4.21.0-2.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"product": {
"name": "nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"product_id": "nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr-devel@4.21.0-2.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nspr-0:4.21.0-2.el8_0.ppc64le",
"product": {
"name": "nspr-0:4.21.0-2.el8_0.ppc64le",
"product_id": "nspr-0:4.21.0-2.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.21.0-2.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-util-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-util-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-tools-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-tools-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-devel-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-devel-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.44.0-7.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"product": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"product_id": "nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.44.0-7.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nspr-0:4.21.0-2.el8_0.src",
"product": {
"name": "nspr-0:4.21.0-2.el8_0.src",
"product_id": "nspr-0:4.21.0-2.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nspr@4.21.0-2.el8_0?arch=src"
}
}
},
{
"category": "product_version",
"name": "nss-0:3.44.0-7.el8_0.src",
"product": {
"name": "nss-0:3.44.0-7.el8_0.src",
"product_id": "nss-0:3.44.0-7.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.44.0-7.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.21.0-2.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64"
},
"product_reference": "nspr-0:4.21.0-2.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.21.0-2.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686"
},
"product_reference": "nspr-0:4.21.0-2.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.21.0-2.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le"
},
"product_reference": "nspr-0:4.21.0-2.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.21.0-2.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x"
},
"product_reference": "nspr-0:4.21.0-2.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.21.0-2.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src"
},
"product_reference": "nspr-0:4.21.0-2.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-0:4.21.0-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64"
},
"product_reference": "nspr-0:4.21.0-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64"
},
"product_reference": "nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686"
},
"product_reference": "nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le"
},
"product_reference": "nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x"
},
"product_reference": "nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debuginfo-0:4.21.0-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64"
},
"product_reference": "nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64"
},
"product_reference": "nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686"
},
"product_reference": "nspr-debugsource-0:4.21.0-2.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le"
},
"product_reference": "nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x"
},
"product_reference": "nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-debugsource-0:4.21.0-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64"
},
"product_reference": "nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.21.0-2.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64"
},
"product_reference": "nspr-devel-0:4.21.0-2.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.21.0-2.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686"
},
"product_reference": "nspr-devel-0:4.21.0-2.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.21.0-2.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le"
},
"product_reference": "nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.21.0-2.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x"
},
"product_reference": "nspr-devel-0:4.21.0-2.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nspr-devel-0:4.21.0-2.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64"
},
"product_reference": "nspr-devel-0:4.21.0-2.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.44.0-7.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src"
},
"product_reference": "nss-0:3.44.0-7.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-debuginfo-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-debugsource-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-debugsource-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-devel-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-devel-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-devel-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-devel-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-devel-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-softokn-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-softokn-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-softokn-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-softokn-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-sysinit-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-tools-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-tools-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-tools-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-tools-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-util-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-util-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-util-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-util-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-util-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64"
},
"product_reference": "nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686"
},
"product_reference": "nss-util-devel-0:3.44.0-7.el8_0.i686",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le"
},
"product_reference": "nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x"
},
"product_reference": "nss-util-devel-0:3.44.0-7.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.44.0-7.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
},
"product_reference": "nss-util-devel-0:3.44.0-7.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18508",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2019-01-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1671310"
}
],
"notes": [
{
"category": "description",
"text": "In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: NULL pointer dereference in several CMS functions resulting in a denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18508"
},
{
"category": "external",
"summary": "RHBZ#1671310",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671310"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18508",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18508"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes"
}
],
"release_date": "2019-01-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS or NSPR (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1951"
},
{
"category": "workaround",
"details": "This issue only affects applications compiled against NSS which use CMS (Cryptographic Message Syntax) API. Other applications are not affected.",
"product_ids": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: NULL pointer dereference in several CMS functions resulting in a denial of service"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Henry Corrigan-Gibbs"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11719",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2019-07-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728436"
}
],
"notes": [
{
"category": "description",
"text": "When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Out-of-bounds read when importing curve25519 private key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Firefox on Red Hat Enterprise Linux is built against the system nss library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11719"
},
{
"category": "external",
"summary": "RHBZ#1728436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728436"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11719",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11719"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719"
}
],
"release_date": "2019-07-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS or NSPR (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Out-of-bounds read when importing curve25519 private key"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Hubert Kario"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11727",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2019-07-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730988"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox \u003c 68.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11727"
},
{
"category": "external",
"summary": "RHBZ#1730988",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730988"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11727",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727"
}
],
"release_date": "2019-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS or NSPR (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Jonas Allmann"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11729",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-07-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728437"
}
],
"notes": [
{
"category": "description",
"text": "Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Firefox on Red Hat Enterprise Linux is built against the system nss library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11729"
},
{
"category": "external",
"summary": "RHBZ#1728437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11729",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11729"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11729",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11729"
}
],
"release_date": "2019-07-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS or NSPR (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault"
},
{
"cve": "CVE-2019-17007",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2019-04-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1703979"
}
],
"notes": [
{
"category": "description",
"text": "In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue was addressed via upstream nss-3.44, which is already shipped with Red Hat Enterprise Linux 6, 7 and 8.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17007"
},
{
"category": "external",
"summary": "RHBZ#1703979",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703979"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17007",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17007"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17007",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17007"
}
],
"release_date": "2019-03-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS or NSPR (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.src",
"AppStream-8.0.0.Z:nspr-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debuginfo-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-debugsource-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.aarch64",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.i686",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.ppc64le",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.s390x",
"AppStream-8.0.0.Z:nspr-devel-0:4.21.0-2.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.src",
"AppStream-8.0.0.Z:nss-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-debugsource-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-softokn-freebl-devel-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-sysinit-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-tools-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-debuginfo-0:3.44.0-7.el8_0.x86_64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.aarch64",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.i686",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.ppc64le",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.s390x",
"AppStream-8.0.0.Z:nss-util-devel-0:3.44.0-7.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS"
}
]
}
Loading...