5.3
Moyenne
CVE-2016-8635 It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement…
Description
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| nss | 3.21.x | Pas de correctif indiqué |
Autres CVE de nss
Les 6 CVE de nss →
CVE-2023-4421
The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks
Non notée
CVE-2021-43527
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling…
Non notée
CVE-2019-17007
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in…
Non notée
CVE-2019-17006
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks
Non notée