Red Hat Security Advisory

RHSA-2023:1368

nss security and bug fix update

Released 2023-03-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) nspr-4.34.0-17.el9_1, nspr-devel-4.34.0-17.el9_1, nss-3.79.0-17.el9_1 +9

Fixes 1 record

TI-2023-00727 CVE-2023-0767 · GHSA-687w-wqw8-qq8j

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for…

MEDIUM 42

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00817 Published 2023-06-02 Fixed in 110, 102.8