The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1951 advisory.

    Network Security Services (NSS) is a set of libraries designed to support the cross-platform development     of security-enabled client and server applications.

    Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.

    The following packages have been upgraded to a later upstream version: nss (3.44.0), nspr (4.21.0).
    (BZ#1713187, BZ#1713188)

    Security Fix(es):

    * nss: NULL pointer dereference in several CMS functions resulting in a denial of service (CVE-2018-18508)

    * nss: Out-of-bounds read when importing curve25519 private key (CVE-2019-11719)

    * nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (CVE-2019-11729)

    * nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * PQG verify fails when create DSA PQG parameters because the counts aren't returned correctly.
    (BZ#1685325)

    * zeroization of AES context missing (BZ#1719629)

    * RSA Pairwise consistency test (BZ#1719630)

    * FIPS updated for nss-softoken POST (BZ#1722373)

    * DH/ECDH key tests missing for the PG parameters (BZ#1722374)

    * NSS should implement continuous random test on it's seed data or use the kernel AF_ALG interface for     random (BZ#1725059)

    * support setting supported signature algorithms in strsclnt utility (BZ#1725110)

    * certutil -F with no parameters is killed with segmentation fault message (BZ#1725115)

    * NSS: Support for IKE/IPsec typical PKIX usage so libreswan can use nss without rejecting certs based on     EKU (BZ#1725116)

    * NSS should use getentropy() for seeding its RNG, not /dev/urandom. Needs update to NSS 3.37 (BZ#1725117)

    * Disable TLS 1.3 in FIPS mode (BZ#1725773)

    * Wrong alert sent when client uses PKCS#1 signatures in TLS 1.3 (BZ#1728259)

    * x25519 allowed in FIPS mode (BZ#1728260)

    * post handshake authentication with selfserv does not work if SSL_ENABLE_SESSION_TICKETS is set     (BZ#1728261)

    Enhancement(s):

    * Move IKEv1 and IKEv2 KDF's from libreswan to nss-softkn (BZ#1719628)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox, mozilla-nss fixes the following issues :

MozillaFirefox to version ESR 60.8 :

  - CVE-2019-9811: Sandbox escape via installation of     malicious language pack (bsc#1140868).

  - CVE-2019-11711: Script injection within domain through     inner window reuse (bsc#1140868).

  - CVE-2019-11712: Cross-origin POST requests can be made     with NPAPI plugins by following 308 redirects     (bsc#1140868).

  - CVE-2019-11713: Use-after-free with HTTP/2 cached stream     (bsc#1140868).

  - CVE-2019-11729: Empty or malformed p256-ECDH public keys     may trigger a segmentation fault (bsc#1140868).

  - CVE-2019-11715: HTML parsing error can contribute to     content XSS (bsc#1140868).

  - CVE-2019-11717: Caret character improperly escaped in     origins (bsc#1140868).

  - CVE-2019-11719: Out-of-bounds read when importing     curve25519 private key (bsc#1140868).

  - CVE-2019-11730: Same-origin policy treats all files in a     directory as having the same-origin (bsc#1140868).

  - CVE-2019-11709: Multiple Memory safety bugs fixed     (bsc#1140868).

mozilla-nss to version 3.44.1 :

  - Added IPSEC IKE support to softoken 

  - Many new FIPS test cases

This update was imported from the SUSE:SLE-15:Update update project.

This update for MozillaThunderbird to version 68.1.1 fixes the following issues :

  - CVE-2019-11709: Fixed several memory safety bugs.
    (bsc#1140868)

  - CVE-2019-11710: Fixed several memory safety bugs.
    (bsc#1140868)

  - CVE-2019-11711: Fixed a script injection within domain     through inner window reuse. (bsc#1140868)

  - CVE-2019-11712: Fixed an insufficient validation of     cross-origin POST requests within NPAPI plugins.
    (bsc#1140868)

  - CVE-2019-11713: Fixed a use-after-free with HTTP/2     cached stream. (bsc#1140868)

  - CVE-2019-11714: Fixed a crash in NeckoChild.
    (bsc#1140868)

  - CVE-2019-11715: Fixed an HTML parsing error that can     contribute to content XSS. (bsc#1140868)

  - CVE-2019-11716: Fixed an enumeration issue in     globalThis. (bsc#1140868)

  - CVE-2019-11717: Fixed an improper escaping of the caret     character in origins. (bsc#1140868)

  - CVE-2019-11719: Fixed an out-of-bounds read when     importing curve25519 private key. (bsc#1140868)

  - CVE-2019-11720: Fixed a character encoding XSS     vulnerability. (bsc#1140868)

  - CVE-2019-11721: Fixed domain spoofing through unicode     latin 'kra' character. (bsc#1140868)

  - CVE-2019-11723: Fixed a cookie leakage during add-on     fetching across private browsing boundaries.
    (bsc#1140868)

  - CVE-2019-11724: Fixed a permissions issue with the     retired site input.mozilla.org. (bsc#1140868)

  - CVE-2019-11725: Fixed a SafeBrowsing bypass through     WebSockets. (bsc#1140868)

  - CVE-2019-11727: Fixed an insufficient validation for     PKCS#1 v1.5 signatures being used with TLS 1.3.
    (bsc#1140868)

  - CVE-2019-11728: Fixed port scanning through Alt-Svc     header. (bsc#1140868)

  - CVE-2019-11729: Fixed a segmentation fault due to empty     or malformed p256-ECDH public keys. (bsc#1140868)

  - CVE-2019-11730: Fixed an insufficient enforcement of the     same-origin policy that treats all files in a directory     as having the same-origin. (bsc#1140868)

  - CVE-2019-11739: Fixed a Covert Content Attack on S/MIME     encryption using a crafted multipart/alternative     message. (bsc#1150939)

  - CVE-2019-11740: Fixed several memory safety bugs.
    (bsc#1149299)

  - CVE-2019-11742: Fixed a same-origin policy violation     with SVG filters and canvas that enabled theft of     cross-origin images. (bsc#1149303)

  - CVE-2019-11743: Fixed a cross-origin access issue.
    (bsc#1149298)

  - CVE-2019-11744: Fixed a XSS involving breaking out of     title and textarea elements using innerHTML.
    (bsc#1149304)

  - CVE-2019-11746: Fixed a use-after-free while     manipulating video. (bsc#1149297)

  - CVE-2019-11752: Fixed a use-after-free while extracting     a key value in IndexedDB. (bsc#1149296)

  - CVE-2019-11755: Fixed an insufficient validation of     S/MIME messages that allowed the author to be spoofed.
    (bsc#1152375)

This update was imported from the SUSE:SLE-15:Update update project.

The version of nspr installed on the remote host is prior to 4.25.0-2. The version of nss installed on the remote host is prior to 3.53.1-3. The version of nss-softokn installed on the remote host is prior to 3.53.1-6. The version of nss- util installed on the remote host is prior to 3.53.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1559 advisory.

    When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger     an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information     disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
    (CVE-2019-11719)

    A vulnerability exists where it possible to force Network Security Services (NSS) to sign     CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in     CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This     vulnerability affects Firefox < 68. (CVE-2019-11727)

    A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session     handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user     running the application compiled with NSS. (CVE-2019-11756)

    A vulnerability was discovered in nss where input text length was not checked when using certain     cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak.
    The highest threat is to confidentiality and integrity of data as well as system availability.
    (CVE-2019-17006)

    A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been     sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in     the TLS State Machine. If the client gets into this state, incoming Application Data records will be     ignored. (CVE-2019-17023)

    A side channel flaw was found in nss, in the way P-384 and P-521 curves are used in the generation of EDSA     signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-12400)

    A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and     non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature     generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-12401)

    A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks.
    An attacker with sufficient access to mount cache timing attacks during the RSA key generation process     could recover the private key. The highest threat to this flaw is to confidentiality. (CVE-2020-12402)

    A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it     could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which     was not functioning correctly) and strictly enforcing tag length. The highest threat from this     vulnerability is to confidentiality and system availability. (CVE-2020-12403)

    A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and     non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature     generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-6829)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox, mozilla-nss fixes the following issues :

MozillaFirefox to version ESR 60.8 :

CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868).

CVE-2019-11711: Script injection within domain through inner window reuse (bsc#1140868).

CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects (bsc#1140868).

CVE-2019-11713: Use-after-free with HTTP/2 cached stream (bsc#1140868).

CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (bsc#1140868).

CVE-2019-11715: HTML parsing error can contribute to content XSS (bsc#1140868).

CVE-2019-11717: Caret character improperly escaped in origins (bsc#1140868).

CVE-2019-11719: Out-of-bounds read when importing curve25519 private key (bsc#1140868).

CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin (bsc#1140868).

CVE-2019-11709: Multiple Memory safety bugs fixed (bsc#1140868).

mozilla-nss to version 3.44.1: Added IPSEC IKE support to softoken

Many new FIPS test cases

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger     an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information     disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
    (CVE-2019-11719)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of AOS installed on the remote host is prior to 5.19.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
127636	RHEL 8 : nss and nspr (RHSA-2019:1951)	Nessus	Red Hat Local Security Checks	2019/8/12	2024/11/6	high
127731	openSUSE Security Update : MozillaFirefox (openSUSE-2019-1811)	Nessus	SuSE Local Security Checks	2019/8/12	2024/5/6	critical
129663	openSUSE Security Update : MozillaThunderbird (openSUSE-2019-2249)	Nessus	SuSE Local Security Checks	2019/10/7	2024/4/19	critical
142720	Amazon Linux 2 : nspr, nss-softokn, nss-util, nss (ALAS-2020-1559)	Nessus	Amazon Linux Local Security Checks	2020/11/11	2024/12/11	critical
126808	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:1861-1)	Nessus	SuSE Local Security Checks	2019/7/19	2024/5/9	critical
126912	openSUSE Security Update : MozillaFirefox (openSUSE-2019-1782)	Nessus	SuSE Local Security Checks	2019/7/22	2024/5/9	critical
249800	Linux Distros Unpatched Vulnerability : CVE-2019-11719	Nessus	Misc.	2025/8/15	2026/7/24	high
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	2022/9/1	2025/7/22	critical

检测

插件搜索

high

critical

critical

critical

critical

critical

high

critical