CVE-2022-3479

概要

参考情報

• bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• security.gentoo.org/glsa/202212-05 · Third Party Advisory

network security services のその他の脆弱性

• CVE-2019-17007高 7.5In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service…
• CVE-2019-17006緊急 9.8In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application c…
• CVE-2018-18508中 6.5In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resul…
• CVE-2020-25648高 7.5A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS …
• CVE-2018-12404中 5.9A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant o…