Red Hat Security AdvisoryRHSA-2013:1135
nss and nspr security, bug fix, and enhancement update
Released 2013-08-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) nspr-4.9.5-1.el5_9, nspr-4.9.5-1.el5_9.i386, nspr-4.9.5-1.el5_9.ia64 +21
Fixes 2 records
Priority LOW 31
The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMo…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05213 · Published 2013-04-03 · Fixed CWE-119
Priority LOW 26
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03723 · Published 2013-02-08 · Fixed CWE-203
