The remote host is affected by the vulnerability described in GLSA-201406-19 (Mozilla Network Security Service: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the Mozilla Network       Security Service. Please review the CVE identifiers referenced below for       more details about the vulnerabilities.
  Impact :

    A remote attacker can cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. (CVE-2013-1620)

A flaw was found in the way NSS handled invalid handshake packets. A remote attacker could use this flaw to cause a TLS/SSL client using NSS to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2013-5605)

It was found that the fix for CVE-2013-1620 released via SLSA-2013:1135 introduced a regression causing NSS to read uninitialized data when a decryption failure occurred. A remote attacker could use this flaw to cause a TLS/SSL server using NSS to crash. (CVE-2013-1739)

An integer overflow flaw was discovered in both NSS and NSPR's implementation of certification parsing on 64-bit systems. A remote attacker could use these flaws to cause an application using NSS or NSPR to crash. (CVE-2013-1741, CVE-2013-5607)

It was discovered that NSS did not reject certificates with incompatible key usage constraints when validating them while the verifyLog feature was enabled. An application using the NSS certificate validation API could accept an invalid certificate.
(CVE-2013-5606)

After installing this update, applications using NSS, NSPR, or nss-util must be restarted for this update to take effect.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1135 advisory.

    Network Security Services (NSS) is a set of libraries designed to support     the cross-platform development of security-enabled client and server     applications. Netscape Portable Runtime (NSPR) provides platform     independence for non-GUI operating system facilities.

    It was discovered that NSS leaked timing information when decrypting     TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites     were used. A remote attacker could possibly use this flaw to retrieve plain     text from the encrypted packets by using a TLS/SSL or DTLS server as a     padding oracle. (CVE-2013-1620)

    An out-of-bounds memory read flaw was found in the way NSS decoded certain     certificates. If an application using NSS decoded a malformed certificate,     it could cause the application to crash. (CVE-2013-0791)

    Red Hat would like to thank the Mozilla project for reporting     CVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter     of CVE-2013-0791.

    This update also fixes the following bugs:

    * A defect in the FreeBL library implementation of the Diffie-Hellman (DH)     protocol previously caused Openswan to drop connections. (BZ#958023)

     * A memory leak in the nssutil_ReadSecmodDB() function has been fixed.
    (BZ#986969)

    In addition, the nss package has been upgraded to upstream version 3.14.3,     and the nspr package has been upgraded to upstream version 4.9.5. These     updates provide a number of bug fixes and enhancements over the previous     versions. (BZ#949845, BZ#924741)

    Note that while upstream NSS version 3.14 prevents the use of certificates     that have an MD5 signature, this erratum includes a patch that allows such     certificates by default. To prevent the use of certificates that have an     MD5 signature, set the NSS_HASH_ALG_SUPPORT environment variable     to -MD5.

    Users of NSS and NSPR are advised to upgrade to these updated packages,     which fix these issues and add these enhancements. After installing this     update, applications using NSS or NSPR must be restarted for this update to     take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Nadhem Alfardan and Kenny Paterson discovered that the TLS protocol as used in NSS was vulnerable to a timing side-channel attack known as the 'Lucky Thirteen' issue. A remote attacker could use this issue to perform plaintext-recovery attacks via analysis of timing data.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Mozilla suite received security and bugfix updates :

Mozilla Firefox was updated to version 20.0. Mozilla Thunderbird was updated to version 17.0.5. Mozilla SeaMonkey was updated to version 17.0.5. Mozilla XULRunner was updated to version 17.0.5. mozilla-nss was updated to version 3.14.3. mozilla-nspr was updated to version 4.9.6.

mozilla-nspr was updated to version 4.9.6 :

  - aarch64 support

  - added PL_SizeOfArenaPoolExcludingPool function     (bmo#807883)

  - Auto detect android api version for x86 (bmo#782214)

  - Initialize Windows CRITICAL_SECTIONs without debug info     and with nonzero spin count (bmo#812085) Previous update     to version 4.9.5

  - bmo#634793: define NSPR's exact-width integer types     PRInt(N) and PRUint(N) types to match the <stdint.h>     exact-width integer types int(N)_t and uint(N)_t.

  - bmo#782815: passing 'int *' to parameter of type     'unsigned int *' in setsockopt().

  - bmo#822932: Port bmo#802527 (NDK r8b support for x86) to     NSPR.

  - bmo#824742: NSPR shouldn't require librt on Android.

  - bmo#831793: data race on lib->refCount in     PR_UnloadLibrary.

mozilla-nss was updated to version 3.14.3 :

  - disable tests with expired certificates

  - add SEC_PKCS7VerifyDetachedSignatureAtTime using patch     from mozilla tree to fulfill Firefox 21 requirements

  - No new major functionality is introduced in this     release. This release is a patch release to address     CVE-2013-1620 (bmo#822365)

  - 'certutil -a' was not correctly producing ASCII output     as requested. (bmo#840714)

  - NSS 3.14.2 broke compilation with older versions of     sqlite that lacked the SQLITE_FCNTL_TEMPFILENAME file     control. NSS 3.14.3 now properly compiles when used with     older versions of sqlite (bmo#837799) - remove     system-sqlite.patch

  - add arm aarch64 support

  - added system-sqlite.patch (bmo#837799)

  - do not depend on latest sqlite just for a #define

  - enable system sqlite usage again

  - update to 3.14.2

  - required for Firefox >= 20

  - removed obsolete nssckbi update patch

  - MFSA 2013-40/CVE-2013-0791 (bmo#629816) Out-of-bounds     array read in CERT_DecodeCertPackage

  - disable system sqlite usage since we depend on 3.7.15     which is not provided in any openSUSE distribution

  - add nss-sqlitename.patch to avoid any name clash

Changes in MozillaFirefox :

  - update to Firefox 20.0 (bnc#813026)

  - requires NSPR 4.9.5 and NSS 3.14.3

  - MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous     memory safety hazards

  - MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds     write in Cairo library

  - MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with     Mesa graphics driver on Linux

  - MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW     protections allows cloning of protected nodes

  - MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of     tab-modal dialog origin disclosure

  - MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site     scripting (XSS) using timed history navigations

  - MFSA 2013-39/CVE-2013-0792 (bmo#722831) Memory     corruption while rendering grayscale PNG images

  - use GStreamer 1.0 starting with 12.3     (mozilla-gstreamer-1.patch)

  - build fixes for armv7hl :

  - disable debug build as armv7hl does not have enough     memory

  - disable webrtc on armv7hl as it is non-compiling

Changes in MozillaThunderbird :

  - update to Thunderbird 17.0.5 (bnc#813026)

  - requires NSPR 4.9.5 and NSS 3.14.3

  - MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous     memory safety hazards

  - MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds     write in Cairo library

  - MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with     Mesa graphics driver on Linux

  - MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW     protections allows cloning of protected nodes

  - MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site     scripting (XSS) using timed history navigations

Changes in seamonkey :

  - update to SeaMonkey 2.17 (bnc#813026)

  - requires NSPR 4.9.5 and NSS 3.14.3

  - MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous     memory safety hazards

  - MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds     write in Cairo library

  - MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with     Mesa graphics driver on Linux

  - MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW     protections allows cloning of protected nodes

  - MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of     tab-modal dialog origin disclosure

  - MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site     scripting (XSS) using timed history navigations

  - MFSA 2013-39/CVE-2013-0792 (bmo#722831) Memory     corruption while rendering grayscale PNG images

  - use GStreamer 1.0 starting with 12.3     (mozilla-gstreamer-1.patch)

Changes in xulrunner :

  - update to 17.0.5esr (bnc#813026)

  - requires NSPR 4.9.5 and NSS 3.14.3

  - MFSA 2013-30/CVE-2013-0788 Miscellaneous memory safety     hazards

  - MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds     write in Cairo library

  - MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with     Mesa graphics driver on Linux

  - MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW     protections allows cloning of protected nodes

  - MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of     tab-modal dialog origin disclosure

  - MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site     scripting (XSS) using timed history navigations

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has nss packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the way NSS responded to an     SSLv2-compatible ClientHello with a ServerHello that had     an all-zero random. A man-in-the-middle attacker could     use this flaw in a passive replay attack.
    (CVE-2018-12384)

  - The TLS implementation in Mozilla Network Security     Services (NSS) does not properly consider timing side-     channel attacks on a noncompliant MAC check operation     during the processing of malformed CBC padding, which     allows remote attackers to conduct distinguishing     attacks and plaintext-recovery attacks via statistical     analysis of timing data for crafted packets, a related     issue to CVE-2013-0169. (CVE-2013-1620)

  - Mozilla Network Security Services (NSS) before 3.15.2     does not ensure that data structures are initialized     before read operations, which allows remote attackers to     cause a denial of service or possibly have unspecified     other impact via vectors that trigger a decryption     failure. (CVE-2013-1739)

  - A flaw was found in the way TLS False Start was     implemented in NSS. An attacker could use this flaw to     potentially return unencrypted information from the     server. (CVE-2013-1740)

  - Integer overflow in Mozilla Network Security Services     (NSS) 3.15 before 3.15.3 allows remote attackers to     cause a denial of service or possibly have unspecified     other impact via a large size value. (CVE-2013-1741)

  - Mozilla Network Security Services (NSS) 3.14 before     3.14.5 and 3.15 before 3.15.3 allows remote attackers to     cause a denial of service or possibly have unspecified     other impact via invalid handshake packets.
    (CVE-2013-5605)

  - The CERT_VerifyCert function in lib/certhigh/certvfy.c     in Mozilla Network Security Services (NSS) 3.15 before     3.15.3 provides an unexpected return value for an     incompatible key-usage certificate when the     CERTVerifyLog argument is valid, which might allow     remote attackers to bypass intended access restrictions     via a crafted certificate. (CVE-2013-5606)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1135 advisory.

    nspr     [4.9.2-4]
    - Resolves: rhbz#924741 - Rebase to nspr-4.9.5

    nss     [3.14.3-6]
    - Resolves: rhbz#986969 - nssutil_ReadSecmodDB() leaks memory

    [3.14.3-5]
    - Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
    - Remove the unused and obsolete nss-nochktest.patch
    - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue

    [3.14.3-4]
    - Fix rpmdiff test reported failures and remove other unwanted changes
    - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue

    [3.14.3-3]
    - Update to NSS_3_14_3_RTM
    - Rework the rebase to preserve needed idiosynchracies
    - Ensure we install frebl/softoken from the extra build tree
    - Don't include freebl static library or its private headers
    - Add patch to deal with system sqlite not being recent enough
    - Don't install nss-sysinit nor sharedb
    - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue

    [3.14.3-2]
    - Restore the freebl-softoken source tar ball updated to 3.14.3
    - Renumbering of some sources for clarity
    - Resolves: rhbz#918870 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue

    [3.14.3-1]
    - Update to NSS_3_14_3_RTM
    - Resolves: rhbz#918870 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated nss, nss-util, nss-softokn, and nspr packages that fix two security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.
nss-softokn provides an NSS softoken cryptographic module.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

Red Hat would like to thank the Mozilla project for reporting CVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter of CVE-2013-0791.

This update also fixes the following bugs :

* The RHBA-2013:0445 update (which upgraded NSS to version 3.14) prevented the use of certificates that have an MD5 signature. This caused problems in certain environments. With this update, certificates that have an MD5 signature are once again allowed. To prevent the use of certificates that have an MD5 signature, set the 'NSS_HASH_ALG_SUPPORT' environment variable to '-MD5'. (BZ#957603)

* Previously, the sechash.h header file was missing, preventing certain source RPMs (such as firefox and xulrunner) from building.
(BZ#948715)

* A memory leak in the nssutil_ReadSecmodDB() function has been fixed.
(BZ#984967)

In addition, the nss package has been upgraded to upstream version 3.14.3, the nss-util package has been upgraded to upstream version 3.14.3, the nss-softokn package has been upgraded to upstream version 3.14.3, and the nspr package has been upgraded to upstream version 4.9.5. These updates provide a number of bug fixes and enhancements over the previous versions. (BZ#927157, BZ#927171, BZ#927158, BZ#927186)

Users of NSS, NSPR, nss-util, and nss-softokn are advised to upgrade to these updated packages, which fix these issues and add these enhancements. After installing this update, applications using NSS, NSPR, nss-util, or nss-softokn must be restarted for this update to take effect.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

Update nss to nss-3.14.3

This is a patch release to address CVE-2013-1620.

Detailed descriptions of the bugs fixes on nss-3.14.3 can be found in the upstream release notes at https://developer.mozilla.org/en-US/docs/NSS/NSS_3.14.3_release_notes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
76178	GLSA-201406-19 : Mozilla Network Security Service: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/6/23	2021/1/6	medium
78198	F5 Networks BIG-IP : TLS in Mozilla NSS vulnerability (K15630)	Nessus	F5 Networks Local Security Checks	2014/10/10	2022/12/5	medium
71424	Scientific Linux Security Update : nss, nspr, and nss-util on SL6.x i386/x86_64 (20131212)	Nessus	Scientific Linux Local Security Checks	2013/12/14	2021/1/14	high
69222	RHEL 5 : nss and nspr (RHSA-2013:1135)	Nessus	Red Hat Local Security Checks	2013/8/6	2024/11/4	high
65572	Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : nss vulnerability (USN-1763-1)	Nessus	Ubuntu Local Security Checks	2013/3/15	2019/9/19	medium
74965	openSUSE Security Update : Mozilla Firefox and others (openSUSE-SU-2013:0630-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	critical
127200	NewStart CGSL CORE 5.04 / MAIN 5.04 : nss Multiple Vulnerabilities (NS-SA-2019-0033)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2025/11/20	medium
69221	Oracle Linux 5 : nss / and / nspr (ELSA-2013-1135)	Nessus	Oracle Linux Local Security Checks	2013/8/6	2025/4/29	high
69247	CentOS 6 : nss / nss-util / nss-softokn / nspr (CESA-2013:1144)	Nessus	CentOS Local Security Checks	2013/8/8	2021/1/4	medium
70220	Amazon Linux AMI : nspr (ALAS-2013-216)	Nessus	Amazon Linux Local Security Checks	2013/10/1	2018/4/18	medium
64941	Fedora 18 : nspr-4.9.5-2.fc18 / nss-3.14.3-1.fc18 / nss-softokn-3.14.3-1.fc18 / etc (2013-2929)	Nessus	Fedora Local Security Checks	2013/3/1	2021/1/11	medium

检测

插件搜索

medium

medium

high

high

medium

critical

medium

high

medium

medium

medium