Google reported to Mozilla that TURKTRUST, a certificate authority in Mozillas root program, had mis-issued two intermediate certificates to customers. The issue was not specific to Firefox but there was evidence that one of the certificates was used for man-in-the-middle (MITM) traffic management of domain names that the customer did not legitimately own or control. This issue was resolved by revoking the trust for these specific mis-issued certificates (CVE-2013-0743).

The rootcerts package has been upgraded to address this flaw and the Mozilla NSS package has been rebuilt to pickup the changes.

The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169 (CVE-2013-1620).

The NSPR package has been upgraded to the 4.9.5 version due to dependecies of newer NSS.

The NSS package has been upgraded to the 3.14.3 version which is not vulnerable to this issue.

The sqlite3 update addresses a crash when using svn commit after export MALLOC_CHECK_=3.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries :

  - Kernel
  - Netscape Portable Runtime (NSPR)
  - Network Security Services (NSS)

Updated nss, nss-util, nss-softokn, and nspr packages that fix two security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.
nss-softokn provides an NSS softoken cryptographic module.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

Red Hat would like to thank the Mozilla project for reporting CVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter of CVE-2013-0791.

This update also fixes the following bugs :

* The RHBA-2013:0445 update (which upgraded NSS to version 3.14) prevented the use of certificates that have an MD5 signature. This caused problems in certain environments. With this update, certificates that have an MD5 signature are once again allowed. To prevent the use of certificates that have an MD5 signature, set the 'NSS_HASH_ALG_SUPPORT' environment variable to '-MD5'. (BZ#957603)

* Previously, the sechash.h header file was missing, preventing certain source RPMs (such as firefox and xulrunner) from building.
(BZ#948715)

* A memory leak in the nssutil_ReadSecmodDB() function has been fixed.
(BZ#984967)

In addition, the nss package has been upgraded to upstream version 3.14.3, the nss-util package has been upgraded to upstream version 3.14.3, the nss-softokn package has been upgraded to upstream version 3.14.3, and the nspr package has been upgraded to upstream version 4.9.5. These updates provide a number of bug fixes and enhancements over the previous versions. (BZ#927157, BZ#927171, BZ#927158, BZ#927186)

Users of NSS, NSPR, nss-util, and nss-softokn are advised to upgrade to these updated packages, which fix these issues and add these enhancements. After installing this update, applications using NSS, NSPR, nss-util, or nss-softokn must be restarted for this update to take effect.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

This update also fixes the following bugs :

  - The SLBA-2013:0445 update (which upgraded NSS to version     3.14) prevented the use of certificates that have an MD5     signature. This caused problems in certain environments.
    With this update, certificates that have an MD5     signature are once again allowed. To prevent the use of     certificates that have an MD5 signature, set the     'NSS_HASH_ALG_SUPPORT' environment variable to '-MD5'.

  - Previously, the sechash.h header file was missing,     preventing certain source RPMs (such as firefox and     xulrunner) from building.

  - A memory leak in the nssutil_ReadSecmodDB() function has     been fixed.

In addition, the nss package has been upgraded to upstream version 3.14.3, the nss-util package has been upgraded to upstream version 3.14.3, the nss-softokn package has been upgraded to upstream version 3.14.3, and the nspr package has been upgraded to upstream version 4.9.5. These updates provide a number of bug fixes and enhancements over the previous versions.

After installing this update, applications using NSS, NSPR, nss-util, or nss-softokn must be restarted for this update to take effect.

A flaw was found in the way NSS handled invalid handshake packets. A remote attacker could use this flaw to cause a TLS/SSL client using NSS to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2013-5605)

It was found that the fix for CVE-2013-1620 introduced a regression causing NSS to read uninitialized data when a decryption failure occurred. A remote attacker could use this flaw to cause a TLS/SSL server using NSS to crash. (CVE-2013-1739)

An integer overflow flaw was discovered in both NSS and NSPR's implementation of certification parsing on 64-bit systems. A remote attacker could use these flaws to cause an application using NSS or NSPR to crash. (CVE-2013-1741 , CVE-2013-5607)

It was discovered that NSS did not reject certificates with incompatible key usage constraints when validating them while the verifyLog feature was enabled. An application using the NSS certificate validation API could accept an invalid certificate.
(CVE-2013-5606)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-618:04 advisory.

    nss: Network Security Services (NSS) is a set of libraries designed to support cross-platform development     of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3,     TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
     nss-util: Utilities for Network Security Services and the Softoken module      nss-softokn: Network Security Services Softoken Cryptographic Module      nspr: NSPR provides platform independence for non-GUI operating system facilities. These facilities     include threads, thread synchronization, normal file and network I/O, interval timing and calendar time,     basic memory management (malloc and free) and shared library linking.
    Security issues fixed with this release:
     CVE-2013-0791     The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox     before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before     17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service     (out-of-bounds read and memory corruption) via a crafted certificate.
     CVE-2013-1620     The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-     channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding,     which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via     statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Update to nss-3.14.3

This is a patch release to address CVE-2013-1620.

Detailed descriptions of the bugs fixed by nss-3.14.3 can be found in the upstream release notes at https://developer.mozilla.org/en-US/docs/NSS/NSS_3.14.3_release_notes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An updated rhev-hypervisor6 package that fixes three security issues and various bugs is now available.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent.

Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions.

Upgrade Note: If you upgrade the Red Hat Enterprise Virtualization Hypervisor through the 3.2 Manager administration portal, the Host may appear with the status of 'Install Failed'. If this happens, place the host into maintenance mode, then activate it again to get the host back to an 'Up' state.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

It was found that the fix for CVE-2013-0167 released via RHSA-2013:0907 was incomplete. A privileged guest user could potentially use this flaw to make the host the guest is running on unavailable to the management server. (CVE-2013-4236)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

Red Hat would like to thank the Mozilla project for reporting CVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter of CVE-2013-0791. The CVE-2013-4236 issue was found by David Gibson of Red Hat.

This updated package provides updated components that include fixes for various security issues. These issues have no security impact on Red Hat Enterprise Virtualization Hypervisor itself, however. The security fixes included in this update address the following CVE numbers :

CVE-2013-4854 (bind issue)

CVE-2012-6544, CVE-2013-2146, CVE-2013-2206, CVE-2013-2224, CVE-2013-2232, and CVE-2013-2237 (kernel issues)

This update also contains the fixes from the following errata :

* vdsm: RHSA-2013:1155 and RHBA-2013:1158

Users of the Red Hat Enterprise Virtualization Hypervisor are advised to upgrade to this updated package, which corrects these issues.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

This update also fixes the following bugs :

  - A defect in the FreeBL library implementation of the     Diffie-Hellman (DH) protocol previously caused Openswan     to drop connections.

  - A memory leak in the nssutil_ReadSecmodDB() function has     been fixed.

In addition, the nss package has been upgraded to upstream version 3.14.3, and the nspr package has been upgraded to upstream version 4.9.5. These updates provide a number of bug fixes and enhancements over the previous versions.

Note that while upstream NSS version 3.14 prevents the use of certificates that have an MD5 signature, this erratum includes a patch that allows such certificates by default. To prevent the use of certificates that have an MD5 signature, set the 'NSS_HASH_ALG_SUPPORT' environment variable to '-MD5'.

After installing this update, applications using NSS or NSPR must be restarted for this update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1144 advisory.

    nspr     [4.9.5-2]
    - Update to NSPR_4_9_5_RTM
    - Resolves: rhbz#927186 - Rebase to nspr-4.9.5
    - Add upstream URL for an existing patch per packaging guidelines

    [4.9.5-1]
    - Resolves: Rebase to nspr-4.9.5

    [4.9.2-1]
    - Update to nspr-4.9.2
    - Related: rhbz#863286

    nss     [3.14.3-4.0.1.el6_4]
    - Added nss-vendor.patch to change vendor

    [3.14.3-4]
    - Revert to accepting MD5 on digital signatures by default
    - Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled

    [3.14.3-3]
    - Ensure pem uses system freebl as with this update freebl brings in new API's
    - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue

    [3.14.3-2]
    - Install sechash.h and secmodt.h which are now provided by nss-devel
    - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
    - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken

    [3.14.3-1]
    - Update to NSS_3.14.3_RTM
    - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
    - Update expired test certificates (fixed in upstream bug 852781)
    - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
    - Reactivate the aia tests

    nss-softokn     [3.14.3-3]
    - Add patch to conditionally compile according to old or new sqlite api
    - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
    - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue

    [3.14.3-2]
    - Revert to using a code patch for relro support
    - Related: rhbz#927158

    [3.14.3-1]
    - Update to NSS_3_14_3_RTM
    - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
    - Add export LD_LIBRARY_PATH=//usr/lib before the signing commands in __spec_install_post scriplet     to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
    - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
    - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
    - Update the licence to MPLv2.0

    [3.12.9-12]
    - Bootstrapping of the builroot in preparation for rebase to 3.14.3
    - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
    - With 3.14.3 hasht.h will be provided by nss-util-devel
    - Related: rhbz#927158 - rebase nss-softokn to 3.14.3

    nss-util     [3.14.3-3]
    - Resolves: rhbz#984967 - nssutil_ReadSecmodDB leaks memory

    [3.14.3-2]
    - Revert to accepting MD5 on digital signatures by default
    - Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled

    [3.14.3-1]
    - Update to NSS_3_14_3_RTM
    - Resolves: rhbz#927171 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
66064	Mandriva Linux Security Advisory : nss (MDVSA-2013:050)	Nessus	Mandriva Local Security Checks	2013/4/20	2021/1/6	medium
89670	VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2013-0015) (remote check)	Nessus	Misc.	2016/3/4	2018/11/15	medium
69256	RHEL 6 : nss, nss-util, nss-softokn, and nspr (RHSA-2013:1144)	Nessus	Red Hat Local Security Checks	2013/8/8	2021/1/14	medium
69279	Scientific Linux Security Update : nss, nss-util, nss-softokn, and nspr on SL6.x i386/x86_64 (20130807)	Nessus	Scientific Linux Local Security Checks	2013/8/9	2021/1/14	medium
71578	Amazon Linux AMI : nspr (ALAS-2013-266)	Nessus	Amazon Linux Local Security Checks	2013/12/23	2018/4/18	high
289057	MiracleLinux 4 : nss-util-3.14.3-3.AXS4, nss-softokn-3.14.3-3.AXS4, nspr-4.9.5-2.AXS4, nss-3.14.3-4.0.1.AXS4 (AXSA:2013-618:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
65532	Fedora 17 : nspr-4.9.5-2.fc17 / nss-3.14.3-1.fc17 / nss-softokn-3.14.3-1.fc17 / etc (2013-3079)	Nessus	Fedora Local Security Checks	2013/3/14	2021/1/11	medium
78969	RHEL 6 : rhev-hypervisor6 (RHSA-2013:1181)	Nessus	Red Hat Local Security Checks	2014/11/8	2021/1/14	medium
69223	Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20130805)	Nessus	Scientific Linux Local Security Checks	2013/8/6	2021/1/14	medium
69253	Oracle Linux 6 : nss, / nss-util, / nss-softokn, / and / nspr (ELSA-2013-1144)	Nessus	Oracle Linux Local Security Checks	2013/8/8	2025/4/29	high
71577	Amazon Linux AMI : nss (ALAS-2013-265)	Nessus	Amazon Linux Local Security Checks	2013/12/23	2018/4/18	high

偵測

搜尋 Plugin

medium

medium

medium

medium

high

high

medium

medium

medium

high

high