The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3327 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3327-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     February 20, 2023                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : nss     Version        : 2:3.42.1-1+deb10u6     CVE ID         : CVE-2020-6829 CVE-2020-12400 CVE-2020-12401 CVE-2020-12403                      CVE-2023-0767

    Multiple security vulnerabilities have been discovered in nss, the Network     Security Service libraries.

    CVE-2020-6829

        When performing EC scalar point multiplication, the wNAF point         multiplication algorithm was used; which leaked partial information about         the nonce used during signature generation. Given an electro-magnetic trace         of a few signature generations, the private key could have been computed.

    CVE-2020-12400

        When converting coordinates from projective to affine, the modular         inversion was not performed in constant time, resulting in a possible         timing-based side channel attack.

    CVE-2020-12401

        During ECDSA signature generation, padding applied in the nonce designed to         ensure constant-time scalar multiplication was removed, resulting in         variable-time execution dependent on secret data.

    CVE-2020-12403

        A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS.
        When using multi-part Chacha20, it could cause out-of-bounds reads.
        This issue was fixed by explicitly disabling multi-part ChaCha20         (which was not functioning correctly) and strictly enforcing tag length.

    CVE-2023-0767

        Christian Holler discovered that incorrect handling of PKCS 12 Safe Bag         attributes may result in execution of arbitrary code if a specially crafted         PKCS 12 certificate bundle is processed.

    For Debian 10 buster, these problems have been fixed in version     2:3.42.1-1+deb10u6.

    We recommend that you upgrade your nss packages.

    For the detailed security status of nss please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/nss

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.19.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.0.5 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4076 advisory.

  - When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger     an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information     disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
    (CVE-2019-11719)

  - A vulnerability exists where it possible to force Network Security Services (NSS) to sign     CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in     CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This     vulnerability affects Firefox < 68. (CVE-2019-11727)

  - Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited     to a denial of service). This vulnerability affects Firefox < 71. (CVE-2019-11756)

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting     in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming     Application Data records will be ignored. This vulnerability affects Firefox < 72. (CVE-2019-17023)

  - When converting coordinates from projective to affine, the modular inversion was not performed in constant     time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80     and Firefox for Android < 80. (CVE-2020-12400)

  - During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar     multiplication was removed, resulting in variable-time execution dependent on secret data. This     vulnerability affects Firefox < 80 and Firefox for Android < 80. (CVE-2020-12401)

  - During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean     Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform     electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes.
    *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected,     but products built on top of it might. This vulnerability affects Firefox < 78. (CVE-2020-12402)

  - A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using     multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling     multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest     threat from this vulnerability is to confidentiality and system availability. (CVE-2020-12403)

  - When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which     leaked partial information about the nonce used during signature generation. Given an electro-magnetic     trace of a few signature generations, the private key could have been computed. This vulnerability affects     Firefox < 80 and Firefox for Android < 80. (CVE-2020-6829)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the nss-softokn packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Network Security Services (NSS) before 3.46, several     cryptographic primitives had missing length checks. In     cases where the application calling the library did not     perform a sanity check on the inputs it could result in     a crash due to a buffer overflow.(CVE-2019-17006)

  - During ECDSA signature generation, padding applied in     the nonce designed to ensure constant-time scalar     multiplication was removed, resulting in variable-time     execution dependent on secret data.(CVE-2020-12401)

  - During RSA key generation, bignum implementations used     a variation of the Binary Extended Euclidean Algorithm     which entailed significantly input-dependent flow. This     allowed an attacker able to perform     electromagnetic-based side channel attacks to record     traces leading to the recovery of the secret primes.
    *Note:* An unmodified Firefox browser does not generate     RSA keys in normal operation and is not affected, but     products built on top of it might.(CVE-2020-12402)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of nspr installed on the remote host is prior to 4.25.0-2.45. The version of nss-softokn installed on the remote host is prior to 3.53.1-6.46. The version of nss-util installed on the remote host is prior to 3.53.1-1.58. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1522 advisory.

    When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger     an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information     disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
    (CVE-2019-11719)

    A vulnerability exists where it possible to force Network Security Services (NSS) to sign     CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in     CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This     vulnerability affects Firefox < 68. (CVE-2019-11727)

    A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session     handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user     running the application compiled with NSS. (CVE-2019-11756)

    A vulnerability was discovered in nss where input text length was not checked when using certain     cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak.
    The highest threat is to confidentiality and integrity of data as well as system availability.
    (CVE-2019-17006)

    A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been     sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in     the TLS State Machine. If the client gets into this state, incoming Application Data records will be     ignored. (CVE-2019-17023)

    A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA     signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-12400)

    A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and     non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature     generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-12401)

    A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks.
    An attacker with sufficient access to mount cache timing attacks during the RSA key generation process     could recover the private key. The highest threat to this flaw is to confidentiality. (CVE-2020-12402)

    A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it     could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which     was not functioning correctly) and strictly enforcing tag length. The highest threat from this     vulnerability is to confidentiality and system availability. (CVE-2020-12403)

    A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and     non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature     generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-6829)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-683:02 advisory.

    nss: Out-of-bounds read when importing curve25519 private key     (CVE-2019-11719)         nss: Use-after-free in sftk_FreeSession due to improper refcounting     (CVE-2019-11756)         nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)         nss: Side channel attack on ECDSA signature generation (CVE-2020-6829)         nss: P-384 and P-521 implementation uses a side-channel vulnerable modular     inversion function (CVE-2020-12400)         nss: ECDSA timing attack mitigation bypass (CVE-2020-12401)         nss: Side channel vulnerabilities during RSA key generation (CVE-2020-12402)         nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds     read (CVE-2020-12403)         nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 (CVE-2019-11727)         nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid     state (CVE-2019-17023)     CVE-2019-11719     CVE-2019-11756     CVE-2019-17006     CVE-2020-6829     CVE-2020-12400     CVE-2020-12401     CVE-2020-12402     CVE-2020-12403     CVE-2019-11727     CVE-2019-17023     Bug Fix(es):
        Memory leak: libcurl leaks 120 bytes on each connection         NSS does not set downgrade sentinel in ServerHello.random for TLS 1.0 and     TLS 1.1         Make TLS 1.3 work in FIPS mode         Name Constraints validation: CN treated as DNS name even when syntactically     invalid as DNS name         x25519 allowed in FIPS mode         When NSS_SDB_USE_CACHE not set, after curl access https, dentry increase but     never released - consider alternative algorithm for benchmarking ACCESS call in     sdb_measureAccess         Running ipa-backup continuously causes httpd to crash and makes it     irrecoverable         nss needs to comply to the new SP800-56A rev 3 requirements         KDF-self-tests-induced changes for nss

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.15.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.15.5 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
171786	Debian dla-3327 : libnss3 - security update	Nessus	Debian Local Security Checks	2023/2/22	2025/1/22	critical
164556	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.0.5)	Nessus	Misc.	2022/9/1	2025/7/22	critical
142600	CentOS 7 : nss and nspr (RHSA-2020:4076)	Nessus	CentOS Local Security Checks	2020/11/6	2024/10/9	critical
145774	EulerOS 2.0 SP8 : nss-softokn (EulerOS-SA-2021-1155)	Nessus	Huawei Local Security Checks	2021/2/1	2024/1/25	critical
151520	Amazon Linux AMI : nspr, nss-softokn, nss-util (ALAS-2021-1522)	Nessus	Amazon Linux Local Security Checks	2021/7/13	2024/12/11	critical
294014	MiracleLinux 7 : nspr-4.25.0-2.el7, nss-softokn-3.53.1-6.el7, nss-3.53.1-3.0.1.el7.AXS7, nss-util-3.53.1-1.el7 (AXSA:2020-683:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
164599	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.5)	Nessus	Misc.	2022/9/1	2025/7/22	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical