Alpine: multiple nss packages: security update to 3.12.11-r0 (deprecated)

high Tenable Self-Hosted Container Security Plugin ID 401238

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome
before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse
pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not
treating this as a security bug." (CVE-2011-3640)

Plugin Details

Severity: High

ID: 401238

Version: Revision 1.25

Type: Local

Family: Alpine Linux Local Security Checks

Published: 8/16/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 95.09

CVSS v2

Risk Factor: High

Base Score: 7.1

Temporal Score: 5.6

Vector: CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2011-3640

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/18/2011

Vulnerability Publication Date: 10/21/2011

Reference Information

CVE: CVE-2011-3640

BID: 50324

Detections

Analytics