An update for nss-softokn is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

Security Fix(es) :

* nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate (CVE-2019-11745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:4114 advisory.

  - nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate     (CVE-2019-11745)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has nss packages installed that are affected by multiple vulnerabilities:

  - Empty or malformed p256-ECDH public keys may trigger a     segmentation fault due values being improperly sanitized     before being copied into memory and used. This     vulnerability affects Firefox ESR < 60.8, Firefox < 68,     and Thunderbird < 60.8. (CVE-2019-11729)

  - When encrypting with a block cipher, if a call to     NSC_EncryptUpdate was made with data smaller than the     block size, a small out of bounds write could occur.
    This could have caused heap corruption and a potentially     exploitable crash. This vulnerability affects     Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox <     71. (CVE-2019-11745)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 68.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-37 advisory.

  - Mozilla developers Christoph Diehl, Nathan Froyd, Jason Kratzer, Christian Holler, Karl Tomlinson, Tyson     Smith reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2019-17012)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been     supplied, leading to stack corruption and a potentially exploitable crash.   Note: this issue only occurs     on Windows. Other operating systems are unaffected. (CVE-2019-13722)

  - When encrypting with a block cipher, if a call to <code>NSCEncryptUpdate</code> was made with data smaller     than the block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

  - When running, the updater service wrote status and log files to an unrestricted location; potentially     allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater     service.   Note: This attack requires local system access and only affects Windows. Other operating     systems are not affected. (CVE-2019-17009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 68.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-38 advisory.

  - Mozilla developers Christoph Diehl, Nathan Froyd, Jason Kratzer, Christian Holler, Karl Tomlinson, Tyson     Smith reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2019-17012)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been     supplied, leading to stack corruption and a potentially exploitable crash.  Note: this issue only occurs     on Windows. Other operating systems are unaffected. (CVE-2019-13722)

  - When encrypting with a block cipher, if a call to <code>NSCEncryptUpdate</code> was made with data smaller     than the block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

  - When running, the updater service wrote status and log files to an unrestricted location; potentially     allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater     service.  Note: This attack requires local system access and only affects Windows. Other operating systems     are not affected. (CVE-2019-17009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has nss packages installed that are affected by multiple vulnerabilities:

  - Empty or malformed p256-ECDH public keys may trigger a     segmentation fault due values being improperly sanitized     before being copied into memory and used. This     vulnerability affects Firefox ESR < 60.8, Firefox < 68,     and Thunderbird < 60.8. (CVE-2019-11729)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4216-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information, or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4190 advisory.

    Network Security Services (NSS) is a set of libraries designed to support the cross-platform development     of security-enabled client and server applications.

    The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

    The nss-util packages provide utilities for use with the Network Security Services (NSS) libraries.

    Security Fix(es):

    * nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate     (CVE-2019-11745)

    * nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for nss, nss-softokn, and nss-util is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

The nss-util packages provide utilities for use with the Network Security Services (NSS) libraries.

Security Fix(es) :

* nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate (CVE-2019-11745)

* nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The version of nss-util installed on the remote host is prior to 3.44.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1942 advisory.

    Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly     sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox     < 68, and Thunderbird < 60.8. (CVE-2019-11729)

    A heap-based buffer overflow was found in the NSC_EncryptUpdate() function in Mozilla nss. A remote     attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with     the permissions of the user running the application (compiled with nss). While the attack complexity is     high, the impact to confidentiality, integrity, and availability are high as well. (CVE-2019-11745)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
144539	Virtuozzo 6 : nss-softokn / nss-softokn-devel / etc (VZLSA-2019-4152)	Nessus	Virtuozzo Local Security Checks	12/22/2020	1/31/2024	high
145655	CentOS 8 : nss (CESA-2019:4114)	Nessus	CentOS Local Security Checks	1/29/2021	3/23/2021	high
133085	NewStart CGSL CORE 5.05 / MAIN 5.05 : nss Multiple Vulnerabilities (NS-SA-2020-0005)	Nessus	NewStart CGSL Local Security Checks	1/20/2020	1/14/2021	high
131767	Mozilla Firefox ESR < 68.3	Nessus	Windows	12/6/2019	11/18/2025	high
131956	Mozilla Thunderbird < 68.3	Nessus	Windows	12/12/2019	11/18/2025	high
132588	NewStart CGSL CORE 5.04 / MAIN 5.04 : nss Multiple Vulnerabilities (NS-SA-2019-0262)	Nessus	NewStart CGSL Local Security Checks	1/2/2020	1/14/2021	high
131924	Ubuntu 18.04 LTS : Firefox vulnerabilities (USN-4216-1)	Nessus	Ubuntu Local Security Checks	12/10/2019	8/29/2024	high
131984	RHEL 7 : nss, nss-softokn, nss-util (RHSA-2019:4190)	Nessus	Red Hat Local Security Checks	12/12/2019	11/7/2024	high
132400	CentOS 7 : nss / nss-softokn / nss-util (CESA-2019:4190)	Nessus	CentOS Local Security Checks	12/27/2019	1/15/2020	high
171835	Amazon Linux 2 : nss-util (ALAS-2023-1942)	Nessus	Amazon Linux Local Security Checks	2/23/2023	12/11/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high