The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4076 advisory.

    - include patches for CVE-2020-6829, CVE-2020-12400,       and CVE-2020-12401 from upstream (ECC constant time issues).
    - include patches for CVE-2020-12403 from upstream       (CHACHA issues).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 71.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-36 advisory.

  - Mozilla developers and community members Philipp, Diego Calleja, Mikhail Gavrilov, Jason Kratzer,     Christian Holler, Markus Stange, Tyson Smith reported memory safety bugs present in Firefox 70. Some of     these bugs showed evidence of memory corruption and we presume that with enough effort some of these could     have been exploited to run arbitrary code. (CVE-2019-17013)

  - Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited     to a denial of service). (CVE-2019-11756)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been     supplied, leading to stack corruption and a potentially exploitable crash.  Note: this issue only occurs     on Windows. Other operating systems are unaffected. (CVE-2019-13722)

  - When encrypting with a block cipher, if a call to <code>NSCEncryptUpdate</code> was made with data smaller     than the block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3280 advisory.

    nspr     [4.25.0-2]
    - Rebuild

    [4.25.0-1]
    - Update to NSPR 4.25

    nss     [3.53.1-11]
    - Fix issue with upgradedb where upgradedb expects standard to       generate dbm databases, not sql databases (default in RHEL8)

    [3.53.1-10]
    - Disable dh timing test because it's unreliable on s390

    [3.53.1-9]
    - Explicitly enable upgradedb/sharedb test cycles

    [3.53.1-8]
    - Disable Delegated Credentials for TLS

    [3.53.1-7]
    - Fix attribute decryption issue where the private key components       integrity check on private attributes where not being checked.

    [3.53.1-6]
    - Update nss-rsa-pkcs1-sigalgs.patch to the upstream version

    [3.53.1-5]
    - Include required checks for dh and ecdh key generation in FIPS mode.

    [3.53.1-4]
    - Add better checks for dh derive operations in FIPS mode.

    [3.53.1-3]
    - Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
    - Adjust for update-crypto-policies packaging change (#1848649)
    - Fix compilation with -Werror=strict-prototypes (#1843417)

    [3.53.1-2]
    - Fix regression in MD5 disablement (#1849938)
    - Include rsa_pkcs1_* in signature_algorithms extension (#1847945)

    [3.53.1-1]
    - Update to NSS 3.53.1

    [3.53.0-1]
    - Update to NSS 3.53

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0876 advisory.

    Network Security Services (NSS) is a set of libraries designed to support the cross-platform development     of security-enabled client and server applications.

    The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

    Security Fix(es):

    * nss: Use-after-free in sftk_FreeSession due to improper refcounting (CVE-2019-11756)

    * nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)

    * nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref     leading to DoS (CVE-2019-17007)

    * nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read (CVE-2020-12403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-690:01 advisory.

    * nss: UAF in sftk_FreeSession due to improper refcounting (CVE-2019-11756)
      * nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)
      * nss: Side channel vulnerabilities during RSA key generation (CVE-2020-12402)
      * nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state (CVE-2019-17023)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited     to a denial of service). This vulnerability affects Firefox < 71. (CVE-2019-11756)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of nspr installed on the remote host is prior to 4.25.0-2. The version of nss installed on the remote host is prior to 3.53.1-3. The version of nss-softokn installed on the remote host is prior to 3.53.1-6. The version of nss- util installed on the remote host is prior to 3.53.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1559 advisory.

    When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger     an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information     disclosure. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
    (CVE-2019-11719)

    A vulnerability exists where it possible to force Network Security Services (NSS) to sign     CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in     CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This     vulnerability affects Firefox < 68. (CVE-2019-11727)

    A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session     handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user     running the application compiled with NSS. (CVE-2019-11756)

    A vulnerability was discovered in nss where input text length was not checked when using certain     cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak.
    The highest threat is to confidentiality and integrity of data as well as system availability.
    (CVE-2019-17006)

    A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been     sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in     the TLS State Machine. If the client gets into this state, incoming Application Data records will be     ignored. (CVE-2019-17023)

    A side channel flaw was found in nss, in the way P-384 and P-521 curves are used in the generation of EDSA     signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-12400)

    A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and     non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature     generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-12401)

    A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks.
    An attacker with sufficient access to mount cache timing attacks during the RSA key generation process     could recover the private key. The highest threat to this flaw is to confidentiality. (CVE-2020-12402)

    A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it     could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which     was not functioning correctly) and strictly enforcing tag length. The highest threat from this     vulnerability is to confidentiality and system availability. (CVE-2020-12403)

    A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and     non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature     generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures,     this information can be used to steal the private key. The highest threat from this vulnerability is to     data confidentiality. (CVE-2020-6829)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0758 advisory.

    The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

    Security Fix(es):

    * nss: Use-after-free in sftk_FreeSession due to improper refcounting (CVE-2019-11756)

    * nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)

    * nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read (CVE-2020-12403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4216-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information, or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.19.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
141312	Oracle Linux 7 : nss / and / nspr (ELSA-2020-4076)	Nessus	Oracle Linux Local Security Checks	2020/10/8	2024/11/1	critical
131772	Mozilla Firefox < 71.0	Nessus	MacOS X Local Security Checks	2019/12/6	2025/11/18	high
139397	Oracle Linux 8 : nss / and / nspr (ELSA-2020-3280)	Nessus	Oracle Linux Local Security Checks	2020/8/7	2024/11/1	critical
147829	RHEL 7 : nss and nss-softokn (RHSA-2021:0876)	Nessus	Red Hat Local Security Checks	2021/3/17	2024/11/7	critical
291740	MiracleLinux 8 : nspr-4.25.0-2.el8, nss-3.53.1-11.0.1.el8 (AXSA:2020-690:01)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	critical
163620	EulerOS Virtualization 2.9.0 : nss (EulerOS-SA-2022-2203)	Nessus	Huawei Local Security Checks	2022/7/29	2022/7/29	high
142720	Amazon Linux 2 : nspr, nss-softokn, nss-util, nss (ALAS-2020-1559)	Nessus	Amazon Linux Local Security Checks	2020/11/11	2024/12/11	critical
147208	RHEL 7 : nss-softokn (RHSA-2021:0758)	Nessus	Red Hat Local Security Checks	2021/3/9	2024/11/7	critical
131924	Ubuntu 18.04 LTS : Firefox vulnerabilities (USN-4216-1)	Nessus	Ubuntu Local Security Checks	2019/12/10	2024/8/29	high
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	2022/9/1	2025/7/22	critical

偵測

搜尋 Plugin

critical

high

critical

critical

critical

high

critical

critical

high

critical