RHSA-2020:3280

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks.

Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service).

After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine.

NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys.

During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow.