5.3
Medium
CVE-2016-8635 It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement…
Description
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| nss | 3.21.x | No fix stated |
References
- bugzilla.redhat.com bugzilla.redhat.com
- RHSA-2016:2779 rhn.redhat.com
- GLSA-201701-46 security.gentoo.org
- 94346 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of nss
The 6 CVEs of nss →
CVE-2023-4421
The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks
Not rated
CVE-2021-43527
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling…
Not rated
CVE-2019-17007
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in…
Not rated
CVE-2019-17006
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks
Not rated