This update for mozilla-nss and mozilla-nspr fixes the following issues :

Issues fixed in mozilla-nss :

  - Update to NSS 3.40.1 (bsc#1119105)

  - CVE-2018-12404: Fixed a cache side-channel variant of     the Bleichenbacher attack (bsc#1119069)

  - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS     responded to an SSLv2-compatible ClientHello with a     ServerHello that had an all-zero random. (bsc#1106873)

  - CVE-2018-0495: Fixed a memory-cache side-channel attack     with ECDSA signatures (bsc#1097410)

  - Fixed a decryption failure during FFDHE key exchange

  - Various security fixes in the ASN.1 code

Issues fixed in mozilla-nspr :

  - Update mozilla-nspr to 4.20 (bsc#1119105)

This update was imported from the SUSE:SLE-15:Update update project.

Netscape Portable Runtime (NSPR) provides platform independence for non- GUI operating system facilities.

The following packages have been upgraded to a later upstream version:
nss (3.44.0), nss-softokn (3.44.0), nss-util (3.44.0), nspr (4.21.0).

Security Fix(es) :

  - ROHNP: Key Extraction Side Channel in Multiple Crypto     Libraries (CVE-2018-0495)

  - nss: Cache side-channel variant of the Bleichenbacher     attack (CVE-2018-12404)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2237 advisory.

    nspr     [4.21.0-1]
    - Rebase to NSPR 4.21

    nss     [3.44.0-4]
    - Fix certutil man page
    - Fix extracting a public key from a private key for dh, ec, and dsa

    [3.44.0-3]
    - Disable TLS 1.3 under FIPS mode
    - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
    - Fix post-handshake auth transcript calculation if       SSL_ENABLE_SESSION_TICKETS is set

    [3.44.0-2]
    - Skip sysinit gtests properly
    - Fix shell syntax error in tests/ssl/ssl.sh
    - Regenerate manual pages

    [3.44.0-1]
    - Rebase to NSS 3.44
    - Restore fix-min-library-version-in-SSLVersionRange.patch to keep       SSL3 supported in the code level while it is disabled by policy
    - Skip TLS 1.3 tests under FIPS mode

    [3.43.0-9]
    - Ignore system policy when running %check

    [3.43.0-8]
    - Fix policy string

    [3.43.0-7]
    - Dont override date in man-pages
    - Revert the change to use XDG basedirs (mozilla#818686)
    - Enable SSL2 compatible ClientHello by default
    - Disable SSL3 and RC4 by default

    [3.43.0-6]
    - Make '-V ssl3:' option work with tools

    [3.43.0-5]
    - Fix regression in MD5 disablement

    [3.43.0-4]
    - add certutil documentation

    [3.43.0-3]
    - Restore complete removal of SSLv2
    - Disable SSLv3
    - Move signtool to unsupported directory

    [3.43.0-2]
    - Expand IPSEC usage to include ssl and email certs. Remove special       processing of the usage based on the critical flag

    [3.43.0-1]
    - Rebase to NSS 3.43

    [3.36.0-8.1]
    - move key on unwrap failure and retry.

    [3.36.0-8]
    - Update the cert verify code to allow a new ipsec usage and follow RFC 4945

    nss-softokn     [3.44.0-5.0.1]
    - Add fips140-2 DSA Known Answer Test fix [Orabug: 26679337]
    - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug: 26617814],       [Orabug: 26617879], [Orabug: 26617849]

    [3.44.0-5]
    - Add pub from priv mechanism

    [3.44.0-4]
    - Add ike mechanisms
    - FIPS update

    [3.44.0-3]
    - Remove stray 'exit' in %prep

    [3.44.0-2]
    - Fix nss-softokn-fs-probe.patch to detect threshold correctly

    [3.44.0-1]
    - Rebase to NSS 3.44

    [3.43.0-5]
    - Restore nss-softokn-fs-probe.patch

    [3.43.0-4]
    - Enable iquote.patch

    [3.43.0-2]
    - Rebuild

    nss-util     [3.44.0-3]
    - Add pub from priv mechanism
    - ike mechanisms should not overlap with JPAKE

    [3.44.0-2]
    - Add ike mechanisms

    [3.44.0-1]
    - Rebase to NSS 3.44

    [3.43.0-1]
    - Rebase to NSS 3.43

    [3.36.0-2]
    - Update the cert verify code to allow a new ipsec usage and follow RFC 4945

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3692-1 advisory.

    Keegan Ryan discovered that OpenSSL incorrectly handled ECDSA key generation. An attacker could possibly     use this issue to perform a cache-timing attack and recover private ECDSA keys. (CVE-2018-0495)

    Guido Vranken discovered that OpenSSL incorrectly handled very large prime values during a key agreement.
    A remote attacker could possibly use this issue to consume resources, leading to a denial of service.
    (CVE-2018-0732)

    Alejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Tapia discovered     that OpenSSL incorrectly handled RSA key generation. An attacker could possibly use this issue to perform     a cache-timing attack and recover private RSA keys. (CVE-2018-0737)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a     memory-cache side-channel attack on ECDSA signatures     that can be mitigated through the use of blinding     during the signing process in the _gcry_ecc_ecdsa_sign     function in cipher/ecc-ecdsa.c, aka the Return Of the     Hidden Number Problem or ROHNP. To discover an ECDSA     key, the attacker needs access to either the local     machine or a different virtual machine on the same     physical host.i1/4^CVE-2018-0495i1/4%0

  - During key agreement in a TLS handshake using a DH(E)     based ciphersuite a malicious server can send a very     large prime value to the client. This will cause the     client to spend an unreasonably long period of time     generating a key for this prime resulting in a hang     until the client has finished. This could be exploited     in a Denial Of Service attack. Fixed in OpenSSL     1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL     1.0.2p-dev (Affected 1.0.2-1.0.2o).i1/4^CVE-2018-0732i1/4%0

  - Constructed ASN.1 types with a recursive definition     (such as can be found in PKCS7) could eventually exceed     the stack given malicious input with excessive     recursion. This could result in a Denial Of Service     attack. There are no such structures used within     SSL/TLS that come from untrusted sources so this is     considered safe. Fixed in OpenSSL 1.1.0h (Affected     1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected     1.0.2b-1.0.2n).i1/4^CVE-2018-0739i1/4%0

  - While parsing an IPAddressFamily extension in an X.509     certificate, it is possible to do a one-byte overread.
    This would result in an incorrect text display of the     certificate. This bug has been present since 2006 and     is present in all versions of OpenSSL before 1.0.2m and     1.1.0g.i1/4^CVE-2017-3735i1/4%0

  - OpenSSL RSA key generation was found to be vulnerable     to cache side-channel attacks. An attacker with     sufficient access to mount cache timing attacks during     the RSA key generation process could recover parts of     the private key.i1/4^CVE-2018-0737i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - openssl: ROHNP - Key Extraction Side Channel in     Multiple Crypto Libraries (CVE-2018-0495)

  - openssl: Malicious server can send large prime to     client during DH(E) TLS handshake causing the client to     hang (CVE-2018-0732)

  - openssl: Malformed X.509 IPAdressFamily could cause OOB     read (CVE-2017-3735)

  - openssl: RSA key generation cache timing vulnerability     in crypto/rsa/rsa_gen.c allows attackers to recover     private keys (CVE-2018-0737)

  - openssl: Handling of crafted recursive ASN.1 structures     can cause a stack overflow and resulting denial of     service (CVE-2018-0739)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1297 advisory.

    Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This     software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged     under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent     update experience.

    This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.29 Service Pack 2 serves as an update     to Red Hat JBoss Core Services Apache HTTP Server 2.4.29, and includes bug fixes for CVEs which are linked     to in the References section.

    Security Fix(es):

    * openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client     to hang (CVE-2018-0732)

    * openssl: ROHNP - Key Extraction Side Channel in Multiple Crypto Libraries (CVE-2018-0495)

    * httpd: privilege escalation from modules scripts (CVE-2019-0211)

    Details around this issue, including information about the CVE, severity of the issue, and CVSS scores can     be found on the CVE pages listed in the References section below.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the openssl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - If an application encounters a fatal protocol error and     then calls SSL_shutdown() twice (once to send a     close_notify, and once to receive one) then OpenSSL can     respond differently to the calling application if a 0     byte record is received with invalid padding compared     to if a 0 byte record is received with an invalid MAC.
    If the application then behaves differently based on     that in a way that is detectable to the remote peer,     then this amounts to a padding oracle that could be     used to decrypt data. In order for this to be     exploitable 'non-stitched' ciphersuites must be in use.
    Stitched ciphersuites are optimised implementations of     certain commonly used ciphersuites. Also the     application must call SSL_shutdown() twice even if a     protocol error has occurred (applications should not do     this but some do anyway). Fixed in OpenSSL 1.0.2r     (Affected 1.0.2-1.0.2q).(CVE-2019-1559)

  - Constructed ASN.1 types with a recursive definition     (such as can be found in PKCS7) could eventually exceed     the stack given malicious input with excessive     recursion. This could result in a Denial Of Service     attack. There are no such structures used within     SSL/TLS that come from untrusted sources so this is     considered safe. Fixed in OpenSSL 1.1.0h (Affected     1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected     1.0.2b-1.0.2n).(CVE-2018-0739)

  - OpenSSL RSA key generation was found to be vulnerable     to cache side-channel attacks. An attacker with     sufficient access to mount cache timing attacks during     the RSA key generation process could recover parts of     the private key.(CVE-2018-0737)

  - During key agreement in a TLS handshake using a DH(E)     based ciphersuite a malicious server can send a very     large prime value to the client. This will cause the     client to spend an unreasonably long period of time     generating a key for this prime resulting in a hang     until the client has finished. This could be exploited     in a Denial Of Service attack. Fixed in OpenSSL     1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL     1.0.2p-dev (Affected 1.0.2-1.0.2o).(CVE-2018-0732)

  - While parsing an IPAddressFamily extension in an X.509     certificate, it is possible to do a one-byte overread.
    This would result in an incorrect text display of the     certificate. This bug has been present since 2006 and     is present in all versions of OpenSSL before 1.0.2m and     1.1.0g.(CVE-2017-3735)

  - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a     memory-cache side-channel attack on ECDSA signatures     that can be mitigated through the use of blinding     during the signing process in the _gcry_ecc_ecdsa_sign     function in cipher/ecc-ecdsa.c, aka the Return Of the     Hidden Number Problem or ROHNP. To discover an ECDSA     key, the attacker needs access to either the local     machine or a different virtual machine on the same     physical host.(CVE-2018-0495)

  - A flaw was found in the way SSL 3.0 handled padding     bytes when decrypting messages encrypted using block     ciphers in cipher block chaining (CBC) mode. This flaw     allows a man-in-the-middle (MITM) attacker to decrypt a     selected byte of a cipher text in as few as 256 tries     if they are able to force a victim application to     repeatedly send the same data over newly created SSL     3.0 connections.(CVE-2014-3566)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of AOS installed on the remote host is prior to 5.11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.11.2 advisory.

  - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow     can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels,     assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass     invalid utf-8 strings to functions like pango_itemize. (CVE-2019-1010238)

  - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal     function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how     large temporary storage area to allocate from the heap. The length value is then subsequently used to     iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit     size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31     bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the     intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is     almost identical to CVE-2017-8816.) (CVE-2018-14618)

  - An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can     send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed     later on, leading to DoS (segmentation fault). (CVE-2018-14598)

  - An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable     to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other     impact. (CVE-2018-14599)

  - An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a     variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading     to DoS or remote code execution. (CVE-2018-14600)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the
_gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
119948	openSUSE Security Update : mozilla-nspr and mozilla-nss (openSUSE-2018-1618)	Nessus	SuSE Local Security Checks	2018/12/31	2025/3/21	medium
123164	openSUSE Security Update : mozilla-nspr and mozilla-nss (openSUSE-2019-1039)	Nessus	SuSE Local Security Checks	2019/3/27	2025/3/13	medium
128243	Scientific Linux Security Update : nss, nss-softokn, nss-util, and nspr on SL7.x x86_64 (20190806)	Nessus	Scientific Linux Local Security Checks	2019/8/27	2025/2/24	medium
180759	Oracle Linux 7 : nss, / nss-softokn, / nss-util, / and / nspr (ELSA-2019-2237)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2025/2/19	medium
110721	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : OpenSSL vulnerabilities (USN-3692-1)	Nessus	Ubuntu Local Security Checks	2018/6/27	2025/3/27	medium
123887	EulerOS Virtualization 2.5.4 : openssl (EulerOS-SA-2019-1201)	Nessus	Huawei Local Security Checks	2019/4/9	2025/3/11	medium
119909	EulerOS 2.0 SP2 : openssl (EulerOS-SA-2018-1420)	Nessus	Huawei Local Security Checks	2018/12/28	2025/3/21	medium
125616	RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2 (RHSA-2019:1297)	Nessus	Red Hat Local Security Checks	2019/5/31	2024/11/6	high
124903	EulerOS Virtualization for ARM 64 3.0.1.0 : openssl (EulerOS-SA-2019-1400)	Nessus	Huawei Local Security Checks	2019/5/14	2024/5/23	medium
164608	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.11.2)	Nessus	Misc.	2022/9/1	2025/7/22	critical
504330	Siemens SIMATIC S7-1500 Observable Discrepancy (CVE-2018-0495)	Tenable OT Security	Tenable.ot	2025/11/13	2025/11/13	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

high

medium

critical

medium