Read the docs
TI-2009-02299 Aliases CVE-2009-2409GHSA-c2f9-w3c5-x385

The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS…

Priority LOW 30CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
Spoofing
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-295.

Summary

The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.

Why it matters now

EPSS 0.0427 91st percentileScored 2026-11-07
Fix Fixed Red Hat: 12 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*before 2.6.4; 2.7.0 to before 2.7.4VulnerableGNU
cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*before 3.12.3VulnerableMozilla
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*0.9.8 – 0.9.8kVulnerableOpenSSL
  • cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:* Versions before 2.6.4; 2.7.0 to before 2.7.4 Vulnerable ·GNU
  • cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:* Versions before 3.12.3 Vulnerable ·Mozilla
  • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 0.9.8 – 0.9.8k Vulnerable ·OpenSSL

Remediation

Red Hat 12 advisories

  • RHSA-2010:0166 Released 2010-03-25 · Red Hat rating Moderate
    gnutls security update
    • Red Hat Enterprise Linux (v. 5 server) gnutls-1.4.1-3.el5_4.8, gnutls-1.4.1-3.el5_4.8.i386, gnutls-1.4.1-3.el5_4.8.ia64 +9
    • Red Hat Enterprise Linux Desktop (v. 5 client) gnutls-1.4.1-3.el5_4.8, gnutls-1.4.1-3.el5_4.8.i386, gnutls-utils-1.4.1-3.el5_4.8 +1
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) gnutls-1.4.1-3.el5_4.8, gnutls-devel-1.4.1-3.el5_4.8, gnutls-devel-1.4.1-3.el5_4.8.i386
  • RHSA-2010:0163 Released 2010-03-25 · Red Hat rating Moderate
    openssl security update
    • Red Hat Desktop version 3 openssl-0.9.7a-33.26, openssl-0.9.7a-33.26.i386, openssl-devel-0.9.7a-33.26 +3
    • Red Hat Enterprise Linux AS version 3 openssl-0.9.7a-33.26, openssl-0.9.7a-33.26.i386, openssl-0.9.7a-33.26.ia64 +9
    • Red Hat Enterprise Linux AS version 4 openssl-0.9.7a-43.17.el4_8.5, openssl-0.9.7a-43.17.el4_8.5.i386, openssl-0.9.7a-43.17.el4_8.5.ia64 +9
    • Red Hat Enterprise Linux Desktop version 4 openssl-0.9.7a-43.17.el4_8.5, openssl-0.9.7a-43.17.el4_8.5.i386, openssl-devel-0.9.7a-43.17.el4_8.5 +3
    • Red Hat Enterprise Linux ES version 3 openssl-0.9.7a-33.26, openssl-0.9.7a-33.26.i386, openssl-0.9.7a-33.26.ia64 +6
    • Red Hat Enterprise Linux ES version 4 openssl-0.9.7a-43.17.el4_8.5, openssl-0.9.7a-43.17.el4_8.5.i386, openssl-0.9.7a-43.17.el4_8.5.ia64 +6
    • Red Hat Enterprise Linux WS version 3 openssl-0.9.7a-33.26, openssl-0.9.7a-33.26.i386, openssl-0.9.7a-33.26.ia64 +6
    • Red Hat Enterprise Linux WS version 4 openssl-0.9.7a-43.17.el4_8.5, openssl-0.9.7a-43.17.el4_8.5.i386, openssl-0.9.7a-43.17.el4_8.5.ia64 +6
  • RHSA-2010:0054 Released 2010-01-20 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-12.el5_4.1, openssl-0.9.8e-12.el5_4.1.i386, openssl-0.9.8e-12.el5_4.1.ia64 +9
    • Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-12.el5_4.1, openssl-0.9.8e-12.el5_4.1.i386, openssl-perl-0.9.8e-12.el5_4.1 +1
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8e-12.el5_4.1, openssl-devel-0.9.8e-12.el5_4.1, openssl-devel-0.9.8e-12.el5_4.1.i386
Show 9 more Red Hat advisories
  • RHSA-2009:1662 Released 2009-12-11 · Red Hat rating Low
    Red Hat Network Satellite Server Sun Java Runtime security update
    • Red Hat Satellite 5.1 (RHEL v.4 AS) java-1.5.0-sun-1.5.0.22-1jpp.1.el4, java-1.5.0-sun-1.5.0.22-1jpp.1.el4.i586, java-1.5.0-sun-devel-1.5.0.22-1jpp.1.el4 +1
  • RHSA-2009:1584 Released 2009-11-16 · Red Hat rating Important
    java-1.6.0-openjdk security update
    • Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5, java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5 +7
    • Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5, java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.7.b09.el5 +7
  • RHSA-2009:1571 Released 2009-11-10 · Red Hat rating Critical
    java-1.5.0-sun security update
    • Red Hat Desktop version 4 Extras java-1.5.0-sun-1.5.0.22-1jpp.1.el4, java-1.5.0-sun-1.5.0.22-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.22-1jpp.1.el4 +8
    • Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-sun-1.5.0.22-1jpp.1.el4, java-1.5.0-sun-1.5.0.22-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.22-1jpp.1.el4 +8
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-sun-1.5.0.22-1jpp.1.el5, java-1.5.0-sun-1.5.0.22-1jpp.1.el5.i586, java-1.5.0-sun-demo-1.5.0.22-1jpp.1.el5 +8
    • Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-sun-1.5.0.22-1jpp.1.el4, java-1.5.0-sun-1.5.0.22-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.22-1jpp.1.el4 +8
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-sun-1.5.0.22-1jpp.1.el5, java-1.5.0-sun-1.5.0.22-1jpp.1.el5.i586, java-1.5.0-sun-demo-1.5.0.22-1jpp.1.el5 +8
    • Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-sun-1.5.0.22-1jpp.1.el4, java-1.5.0-sun-1.5.0.22-1jpp.1.el4.i586, java-1.5.0-sun-demo-1.5.0.22-1jpp.1.el4 +8
  • RHSA-2009:1560 Released 2009-11-09 · Red Hat rating Critical
    java-1.6.0-sun security update
    • Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4 +9
    • Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4 +9
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5, java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586, java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5 +9
    • Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4 +9
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5, java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5.i586, java-1.6.0-sun-demo-1:1.6.0.17-1jpp.2.el5 +9
    • Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.17-1jpp.1.el4 +9
  • RHSA-2009:1432 Released 2009-09-09 · Red Hat rating Critical
    seamonkey security update
    • Red Hat Desktop version 3 seamonkey-1.0.9-0.45.el3, seamonkey-1.0.9-0.45.el3.i386, seamonkey-chat-1.0.9-0.45.el3 +17
    • Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.45.el3, seamonkey-1.0.9-0.45.el3.i386, seamonkey-1.0.9-0.45.el3.ia64 +37
    • Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.45.el3, seamonkey-1.0.9-0.45.el3.i386, seamonkey-1.0.9-0.45.el3.ia64 +27
    • Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.45.el3, seamonkey-1.0.9-0.45.el3.i386, seamonkey-1.0.9-0.45.el3.ia64 +27
  • RHSA-2009:1207 Released 2009-08-12 · Red Hat rating Critical
    nspr and nss security update
    • Red Hat Enterprise Linux EUS (v. 5.2 server) nspr-4.7.4-1.el5_2, nspr-4.7.4-1.el5_2.i386, nspr-4.7.4-1.el5_2.ia64 +21
  • RHSA-2009:1190 Released 2009-07-31 · Red Hat rating Critical
    nspr and nss security and bug fix update
    • Red Hat Enterprise Linux AS EUS (v. 4.7) nspr-4.7.4-1.el4_7.1, nspr-4.7.4-1.el4_7.1.i386, nspr-4.7.4-1.el4_7.1.ia64 +13
    • Red Hat Enterprise Linux ES EUS (v. 4.7) nspr-4.7.4-1.el4_7.1, nspr-4.7.4-1.el4_7.1.i386, nspr-4.7.4-1.el4_7.1.ia64 +9
  • RHSA-2009:1186 Released 2009-07-30 · Red Hat rating Critical
    nspr and nss security, bug fix, and enhancement update
    • Red Hat Enterprise Linux (v. 5 server) nspr-4.7.4-1.el5_3.1, nspr-4.7.4-1.el5_3.1.i386, nspr-4.7.4-1.el5_3.1.ia64 +21
    • Red Hat Enterprise Linux Desktop (v. 5 client) nspr-4.7.4-1.el5_3.1, nspr-4.7.4-1.el5_3.1.i386, nss-3.12.3.99.3-1.el5_3.2 +3
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nspr-4.7.4-1.el5_3.1, nspr-devel-4.7.4-1.el5_3.1, nspr-devel-4.7.4-1.el5_3.1.i386 +5
  • RHSA-2009:1184 Released 2009-07-30 · Red Hat rating Critical
    nspr and nss security and bug fix update
    • Red Hat Enterprise Linux AS version 4 nspr-4.7.4-1.el4_8.1, nspr-4.7.4-1.el4_8.1.i386, nspr-4.7.4-1.el4_8.1.ia64 +17
    • Red Hat Enterprise Linux Desktop version 4 nspr-4.7.4-1.el4_8.1, nspr-4.7.4-1.el4_8.1.i386, nspr-devel-4.7.4-1.el4_8.1 +7
    • Red Hat Enterprise Linux ES version 4 nspr-4.7.4-1.el4_8.1, nspr-4.7.4-1.el4_8.1.i386, nspr-4.7.4-1.el4_8.1.ia64 +12
    • Red Hat Enterprise Linux WS version 4 nspr-4.7.4-1.el4_8.1, nspr-4.7.4-1.el4_8.1.i386, nspr-4.7.4-1.el4_8.1.ia64 +12

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2009:1432, RHSA-2010:0163
Red Hat Desktop version 4 ExtrasFixed RHSA-2009:1560, RHSA-2009:1571
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2009:1186, RHSA-2009:1584, RHSA-2010:0054, RHSA-2010:0166
Red Hat Enterprise Linux AS EUS (v. 4.7)Fixed RHSA-2009:1190
Red Hat Enterprise Linux AS version 3Fixed RHSA-2009:1432, RHSA-2010:0163
Red Hat Enterprise Linux AS version 4Fixed RHSA-2009:1184, RHSA-2010:0163
Red Hat Enterprise Linux AS version 4 ExtrasFixed RHSA-2009:1560, RHSA-2009:1571
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2009:1186, RHSA-2009:1584, RHSA-2010:0054, RHSA-2010:0166
Red Hat Enterprise Linux Desktop Supplementary (v. 5)Fixed RHSA-2009:1560, RHSA-2009:1571
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2009:1186, RHSA-2010:0054, RHSA-2010:0166
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2009:1184, RHSA-2010:0163
Red Hat Enterprise Linux ES EUS (v. 4.7)Fixed RHSA-2009:1190
Red Hat Enterprise Linux ES version 3Fixed RHSA-2009:1432, RHSA-2010:0163
Red Hat Enterprise Linux ES version 4Fixed RHSA-2009:1184, RHSA-2010:0163
Red Hat Enterprise Linux ES version 4 ExtrasFixed RHSA-2009:1560, RHSA-2009:1571
Red Hat Enterprise Linux EUS (v. 5.2 server)Fixed RHSA-2009:1207
Red Hat Enterprise Linux Server Supplementary (v. 5)Fixed RHSA-2009:1560, RHSA-2009:1571
Red Hat Enterprise Linux WS version 3Fixed RHSA-2009:1432, RHSA-2010:0163
Red Hat Enterprise Linux WS version 4Fixed RHSA-2009:1184, RHSA-2010:0163
Red Hat Enterprise Linux WS version 4 ExtrasFixed RHSA-2009:1560, RHSA-2009:1571
Red Hat Satellite 5.1 (RHEL v.4 AS)Fixed RHSA-2009:1662

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-2409
  2. 2026-10-03 Alias added: GHSA-c2f9-w3c5-x385

References

Patch 1

Advisory 21

Other 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences