Red Hat Security AdvisoryRHSA-2023:1366
nss security update
Released 2023-03-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6 ELS) nss-3.44.0-13.el6_10, nss-devel-3.44.0-13.el6_10, nss-sysinit-3.44.0-13.el6_10 +1
- Red Hat Enterprise Linux Server Optional (v. 6 ELS) nss-pkcs11-devel-3.44.0-13.el6_10
Fixes 1 record
Priority MEDIUM 42
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00817 · Published 2023-06-02 · Fixed in 110, 102.8
