This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues :

Issues fixed in MozillaFirefox :

Update to Firefox ESR 60.4 (bsc#1119105)

CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11

CVE-2018-18492: Fixed a use-after-free with select element

CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia

CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs

CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images

CVE-2018-12405: Fixed a few memory safety bugs

Issues fixed in mozilla-nss: Update to NSS 3.40.1 (bsc#1119105)

CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)

CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)

CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)

Fixed a decryption failure during FFDHE key exchange

Various security fixes in the ASN.1 code

Issues fixed in mozilla-nspr: Update mozilla-nspr to 4.20 (bsc#1119105)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has nss packages installed that are affected by multiple vulnerabilities:

  - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a     memory-cache side-channel attack on ECDSA signatures     that can be mitigated through the use of blinding during     the signing process in the _gcry_ecc_ecdsa_sign function     in cipher/ecc-ecdsa.c, aka the Return Of the Hidden     Number Problem or ROHNP. To discover an ECDSA key, the     attacker needs access to either the local machine or a     different virtual machine on the same physical host.
    (CVE-2018-0495)

  - A cached side channel attack during handshakes using RSA     encryption could allow for the decryption of encrypted     content. This is a variant of the Adaptive Chosen     Ciphertext attack (AKA Bleichenbacher attack) and     affects all NSS versions prior to NSS 3.41.
    (CVE-2018-12404)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of     encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack)     and affects all NSS versions prior to NSS 3.41. (CVE-2018-12404)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the nss-softokn packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a     memory-cache side-channel attack on ECDSA signatures     that can be mitigated through the use of blinding     during the signing process in the _gcry_ecc_ecdsa_sign     function in cipher/ecc-ecdsa.c, aka the Return Of the     Hidden Number Problem or ROHNP. To discover an ECDSA     key, the attacker needs access to either the local     machine or a different virtual machine on the same     physical host.(CVE-2018-0495)

  - A cached side channel attack during handshakes using     RSA encryption could allow for the decryption of     encrypted content. This is a variant of the Adaptive     Chosen Ciphertext attack (AKA Bleichenbacher attack)     and affects all NSS versions prior to NSS     3.41.(CVE-2018-12404)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for mozilla-nss and mozilla-nspr fixes the following issues :

Issues fixed in mozilla-nss :

  - Update to NSS 3.40.1 (bsc#1119105)

  - CVE-2018-12404: Fixed a cache side-channel variant of     the Bleichenbacher attack (bsc#1119069)

  - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS     responded to an SSLv2-compatible ClientHello with a     ServerHello that had an all-zero random. (bsc#1106873)

  - CVE-2018-0495: Fixed a memory-cache side-channel attack     with ECDSA signatures (bsc#1097410)

  - Fixed a decryption failure during FFDHE key exchange

  - Various security fixes in the ASN.1 code

Issues fixed in mozilla-nspr :

  - Update mozilla-nspr to 4.20 (bsc#1119105)

This update was imported from the SUSE:SLE-15:Update update project.

ID	名稱	產品	系列	已發布	已更新	嚴重性
120193	SUSE SLED15 / SLES15 Security Update : MozillaFirefox, mozilla-nspr / mozilla-nss (SUSE-SU-2018:4235-1)	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/9	critical
132493	NewStart CGSL CORE 5.05 / MAIN 5.05 : nss Multiple Vulnerabilities (NS-SA-2019-0236)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2025/2/21	medium
222161	Linux Distros Unpatched Vulnerability : CVE-2018-12404	Nessus	Misc.	2025/3/4	2026/11/5	medium
130708	EulerOS 2.0 SP3 : nss-softokn (EulerOS-SA-2019-2246)	Nessus	Huawei Local Security Checks	2019/11/8	2025/2/21	medium
119948	openSUSE Security Update : mozilla-nspr and mozilla-nss (openSUSE-2018-1618)	Nessus	SuSE Local Security Checks	2018/12/31	2025/3/21	medium

偵測

搜尋 Plugin

critical

medium

medium

medium

medium