The version of Firefox installed on the remote macOS or Mac OS X host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-24 advisory.

  - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler     reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these could have been exploited to run arbitrary code.
    (CVE-2020-12426)

  - When <code>%2F</code> was present in a manifest URL, Firefox's AppCache behavior may have become confused     and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to     service requests for the top level directory. (CVE-2020-12415)

  - A <code>VideoStreamEncoder</code> may have been freed in a race condition with     <code>VideoBroadcaster::AddOrUpdateSink</code>, resulting in a use-after-free, memory corruption, and a     potentially exploitable crash. (CVE-2020-12416)

  - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. Note: this issue only affects Firefox     on ARM64 platforms. (CVE-2020-12417)

  - Manipulating individual parts of a  URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for mozilla-nss fixes the following issues :

mozilla-nss was updated to version 3.53.1

CVE-2020-12402: Fixed a potential side channel attack during RSA key generation (bsc#1173032)

Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony (bsc#1168669).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Thunderbird installed on the remote Windows host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-29 advisory.

  - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler     reported memory safety bugs present in Thunderbird 77. Some of these bugs showed evidence of memory     corruption and we presume that with enough effort some of these could have been exploited to run arbitrary     code. (CVE-2020-12426)

  - When <code>%2F</code> was present in a manifest URL, Thunderbird's AppCache behavior may have become     confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used     to service requests for the top level directory. (CVE-2020-12415)

  - A <code>VideoStreamEncoder</code> may have been freed in a race condition with     <code>VideoBroadcaster::AddOrUpdateSink</code>, resulting in a use-after-free, memory corruption, and a     potentially exploitable crash. (CVE-2020-12416)

  - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. Note: this issue only affects Firefox     on ARM64 platforms. (CVE-2020-12417)

  - Manipulating individual parts of a  URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-683:02 advisory.

    nss: Out-of-bounds read when importing curve25519 private key     (CVE-2019-11719)         nss: Use-after-free in sftk_FreeSession due to improper refcounting     (CVE-2019-11756)         nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)         nss: Side channel attack on ECDSA signature generation (CVE-2020-6829)         nss: P-384 and P-521 implementation uses a side-channel vulnerable modular     inversion function (CVE-2020-12400)         nss: ECDSA timing attack mitigation bypass (CVE-2020-12401)         nss: Side channel vulnerabilities during RSA key generation (CVE-2020-12402)         nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds     read (CVE-2020-12403)         nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)         nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid     state (CVE-2019-17023)     CVE-2019-11719     CVE-2019-11756     CVE-2019-17006     CVE-2020-6829     CVE-2020-12400     CVE-2020-12401     CVE-2020-12402     CVE-2020-12403     CVE-2019-11727     CVE-2019-17023     Bug Fix(es):
        Memory leak: libcurl leaks 120 bytes on each connection         NSS does not set downgrade sentinel in ServerHello.random for TLS 1.0 and     TLS 1.1         Make TLS 1.3 work in FIPS mode         Name Constraints validation: CN treated as DNS name even when syntactically     invalid as DNS name         x25519 allowed in FIPS mode         When NSS_SDB_USE_CACHE not set, after curl access https, dentry increase but     never released - consider alternative algorithm for benchmarking ACCESS call in     sdb_measureAccess         Running ipa-backup continuously causes httpd to crash and makes it     irrecoverable         nss needs to comply to the new SP800-56A rev 3 requirements         KDF-self-tests-induced changes for nss

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.19.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.0.5 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.15.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.15.5 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
138084	Mozilla Firefox < 78.0	Nessus	MacOS X Local Security Checks	7/2/2020	11/18/2025	high
138317	SUSE SLED15 / SLES15 Security Update : mozilla-nss (SUSE-SU-2020:1850-1)	Nessus	SuSE Local Security Checks	7/9/2020	1/13/2021	medium
138589	Mozilla Thunderbird < 78.0	Nessus	Windows	7/17/2020	11/18/2025	high
294014	MiracleLinux 7 : nspr-4.25.0-2.el7, nss-softokn-3.53.1-6.el7, nss-3.53.1-3.0.1.el7.AXS7, nss-util-3.53.1-1.el7 (AXSA:2020-683:02)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	critical
164556	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.0.5)	Nessus	Misc.	9/1/2022	7/22/2025	critical
164599	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.5)	Nessus	Misc.	9/1/2022	7/22/2025	critical

Detections

Analytics

Plugins Search

high

medium

high

critical

critical

critical