CVE-2018-12404
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-12404
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12404.json
- Related
- Published
- 2019-05-02T17:29:01Z
- Modified
- 2023-11-29T06:25:24.635979Z
- Details
-
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
- References
-
- http://www.securityfocus.com/bid/107260
- https://access.redhat.com/errata/RHSA-2019:2237
- https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404
- https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf
- https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html
Affected packages
Alpine:v3.10 / nss
Package
- Name
- nss
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed3.41-r0
Affected versions
3.*
3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r6
3.12.10-r6
3.12.11-r6
3.13.1-r6
3.13.3-r6
3.13.4-r6
3.13.5-r6
3.13.6-r6
3.14-r6
3.14.1-r6
3.14.1.1.93-r6
3.14.3-r6
3.15.1-r6
3.15.2-r6
3.15.3-r6
3.15.3.1-r6
3.15.4-r6
3.15.5-r6
3.16-r6
3.16.1-r6
3.16.3-r6
3.17.1-r6
3.17.2-r6
3.17.3-r6
3.17.4-r6
3.18-r6
3.18.1-r6
3.19.2-r6
3.20-r6
3.20.1-r6
3.21-r6
3.22-r6
3.22.1-r6
3.22.3-r6
3.23-r6
3.26-r6
3.27.1-r6
3.27.2-r6
3.28.1-r6
3.30-r6
3.30.1-r6
3.31-r6
3.32-r6
3.33-r6
3.34-r6
3.34.1-r6
3.36.1-r6
3.38-r6
3.39-r6
Alpine:v3.11 / nss
Package
- Name
- nss
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed3.41-r0
Affected versions
3.*
3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r6
3.12.10-r6
3.12.11-r6
3.13.1-r6
3.13.3-r6
3.13.4-r6
3.13.5-r6
3.13.6-r6
3.14-r6
3.14.1-r6
3.14.1.1.93-r6
3.14.3-r6
3.15.1-r6
3.15.2-r6
3.15.3-r6
3.15.3.1-r6
3.15.4-r6
3.15.5-r6
3.16-r6
3.16.1-r6
3.16.3-r6
3.17.1-r6
3.17.2-r6
3.17.3-r6
3.17.4-r6
3.18-r6
3.18.1-r6
3.19.2-r6
3.20-r6
3.20.1-r6
3.21-r6
3.22-r6
3.22.1-r6
3.22.3-r6
3.23-r6
3.26-r6
3.27.1-r6
3.27.2-r6
3.28.1-r6
3.30-r6
3.30.1-r6
3.31-r6
3.32-r6
3.33-r6
3.34-r6
3.34.1-r6
3.36.1-r6
3.38-r6
3.39-r6
Alpine:v3.12 / nss
Package
- Name
- nss
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed3.41-r0
Affected versions
3.*
3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r0
3.12.10-r0
3.12.11-r0
3.12.11-r1
3.13.1-r0
3.13.1-r1
3.13.3-r0
3.13.4-r0
3.13.4-r1
3.13.5-r0
3.13.6-r0
3.14-r0
3.14.1-r0
3.14.1.1.93-r0
3.14.3-r0
3.15.1-r0
3.15.1-r1
3.15.1-r2
3.15.2-r0
3.15.3-r0
3.15.3.1-r0
3.15.4-r0
3.15.5-r0
3.16-r0
3.16.1-r0
3.16.3-r0
3.17.1-r0
3.17.2-r0
3.17.3-r0
3.17.4-r0
3.18-r0
3.18.1-r0
3.19.2-r0
3.19.2-r1
3.20-r0
3.20.1-r0
3.21-r0
3.22-r0
3.22.1-r0
3.22.3-r0
3.23-r0
3.26-r0
3.27.1-r0
3.27.2-r0
3.28.1-r0
3.28.1-r1
3.30-r0
3.30-r1
3.30-r2
3.30.1-r0
3.31-r0
3.32-r0
3.33-r0
3.34-r0
3.34.1-r0
3.34.1-r1
3.36.1-r0
3.38-r0
3.38-r1
3.39-r0
Alpine:v3.9 / nss
Package
- Name
- nss
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed3.41-r0
Affected versions
3.*
3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r6
3.12.10-r6
3.12.11-r6
3.13.1-r6
3.13.3-r6
3.13.4-r6
3.13.5-r6
3.13.6-r6
3.14-r6
3.14.1-r6
3.14.1.1.93-r6
3.14.3-r6
3.15.1-r6
3.15.2-r6
3.15.3-r6
3.15.3.1-r6
3.15.4-r6
3.15.5-r6
3.16-r6
3.16.1-r6
3.16.3-r6
3.17.1-r6
3.17.2-r6
3.17.3-r6
3.17.4-r6
3.18-r6
3.18.1-r6
3.19.2-r6
3.20-r6
3.20.1-r6
3.21-r6
3.22-r6
3.22.1-r6
3.22.3-r6
3.23-r6
3.26-r6
3.27.1-r6
3.27.2-r6
3.28.1-r6
3.30-r6
3.30.1-r6
3.31-r6
3.32-r6
3.33-r6
3.34-r6
3.34.1-r6
3.36.1-r6
3.38-r6
3.39-r6