An update for nss, nss-softokn, and nss-util is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

The nss-util packages provide utilities for use with the Network Security Services (NSS) libraries.

Security Fix(es) :

* nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate (CVE-2019-11745)

* nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has nss packages installed that are affected by multiple vulnerabilities:

  - Empty or malformed p256-ECDH public keys may trigger a     segmentation fault due values being improperly sanitized     before being copied into memory and used. This     vulnerability affects Firefox ESR < 60.8, Firefox < 68,     and Thunderbird < 60.8. (CVE-2019-11729)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox, mozilla-nss fixes the following issues :

MozillaFirefox to version ESR 60.8 :

CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868).

CVE-2019-11711: Script injection within domain through inner window reuse (bsc#1140868).

CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects (bsc#1140868).

CVE-2019-11713: Use-after-free with HTTP/2 cached stream (bsc#1140868).

CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (bsc#1140868).

CVE-2019-11715: HTML parsing error can contribute to content XSS (bsc#1140868).

CVE-2019-11717: Caret character improperly escaped in origins (bsc#1140868).

CVE-2019-11719: Out-of-bounds read when importing curve25519 private key (bsc#1140868).

CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin (bsc#1140868).

CVE-2019-11709: Multiple Memory safety bugs fixed (bsc#1140868).

mozilla-nss to version 3.44.1: Added IPSEC IKE support to softoken

Many new FIPS test cases

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for MozillaFirefox, mozilla-nss fixes the following issues :

MozillaFirefox to version ESR 60.8 :

  - CVE-2019-9811: Sandbox escape via installation of     malicious language pack (bsc#1140868).

  - CVE-2019-11711: Script injection within domain through     inner window reuse (bsc#1140868).

  - CVE-2019-11712: Cross-origin POST requests can be made     with NPAPI plugins by following 308 redirects     (bsc#1140868).

  - CVE-2019-11713: Use-after-free with HTTP/2 cached stream     (bsc#1140868).

  - CVE-2019-11729: Empty or malformed p256-ECDH public keys     may trigger a segmentation fault (bsc#1140868).

  - CVE-2019-11715: HTML parsing error can contribute to     content XSS (bsc#1140868).

  - CVE-2019-11717: Caret character improperly escaped in     origins (bsc#1140868).

  - CVE-2019-11719: Out-of-bounds read when importing     curve25519 private key (bsc#1140868).

  - CVE-2019-11730: Same-origin policy treats all files in a     directory as having the same-origin (bsc#1140868).

  - CVE-2019-11709: Multiple Memory safety bugs fixed     (bsc#1140868).

mozilla-nss to version 3.44.1 :

  - Added IPSEC IKE support to softoken 

  - Many new FIPS test cases

This update was imported from the SUSE:SLE-15:Update update project.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has nss packages installed that are affected by multiple vulnerabilities:

  - Empty or malformed p256-ECDH public keys may trigger a     segmentation fault due values being improperly sanitized     before being copied into memory and used. This     vulnerability affects Firefox ESR < 60.8, Firefox < 68,     and Thunderbird < 60.8. (CVE-2019-11729)

  - When encrypting with a block cipher, if a call to     NSC_EncryptUpdate was made with data smaller than the     block size, a small out of bounds write could occur.
    This could have caused heap corruption and a potentially     exploitable crash. This vulnerability affects     Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox <     71. (CVE-2019-11745)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the nss-softokn packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Empty or malformed p256-ECDH public keys may trigger a     segmentation fault due values being improperly     sanitized before being copied into memory and used.
    This vulnerability affects Firefox ESR < 60.8, Firefox     < 68, and Thunderbird < 60.8.(CVE-2019-11729)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nss-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Empty or malformed p256-ECDH public keys may trigger a     segmentation fault due values being improperly     sanitized before being copied into memory and used.
    This vulnerability affects Firefox ESR < 60.8, Firefox     < 68, and Thunderbird < 60.8.(CVE-2019-11729)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of nss-util installed on the remote host is prior to 3.44.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1942 advisory.

    Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly     sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox     < 68, and Thunderbird < 60.8. (CVE-2019-11729)

    A heap-based buffer overflow was found in the NSC_EncryptUpdate() function in Mozilla nss. A remote     attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with     the permissions of the user running the application (compiled with nss). While the attack complexity is     high, the impact to confidentiality, integrity, and availability are high as well. (CVE-2019-11745)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
132400	CentOS 7 : nss / nss-softokn / nss-util (CESA-2019:4190)	Nessus	CentOS Local Security Checks	12/27/2019	1/15/2020	high
132588	NewStart CGSL CORE 5.04 / MAIN 5.04 : nss Multiple Vulnerabilities (NS-SA-2019-0262)	Nessus	NewStart CGSL Local Security Checks	1/2/2020	1/14/2021	high
126808	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:1861-1)	Nessus	SuSE Local Security Checks	7/19/2019	5/9/2024	critical
126912	openSUSE Security Update : MozillaFirefox (openSUSE-2019-1782)	Nessus	SuSE Local Security Checks	7/22/2019	5/9/2024	critical
133085	NewStart CGSL CORE 5.05 / MAIN 5.05 : nss Multiple Vulnerabilities (NS-SA-2020-0005)	Nessus	NewStart CGSL Local Security Checks	1/20/2020	1/14/2021	high
135543	EulerOS 2.0 SP3 : nss-softokn (EulerOS-SA-2020-1414)	Nessus	Huawei Local Security Checks	4/15/2020	3/18/2024	high
135544	EulerOS 2.0 SP3 : nss-util (EulerOS-SA-2020-1415)	Nessus	Huawei Local Security Checks	4/15/2020	3/18/2024	high
171835	Amazon Linux 2 : nss-util (ALAS-2023-1942)	Nessus	Amazon Linux Local Security Checks	2/23/2023	12/11/2024	high

Detections

Analytics

Plugins Search

high

high

critical

critical

high

high

high

high