PT-2016-7536 · Mozilla+4 · Nss+4
Huzaifa S. Sidhpurwala
·
Publicado
2016-11-16
·
Atualizado
2023-02-12
·
CVE-2016-8635
CVSS v3.1
5.9
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
NSS versions 3.21.x
Description
A flaw was found in the Diffie Hellman Client key exchange handling, making it vulnerable to a small subgroup confinement attack. This allows an attacker to recover private keys by confining the client DH key to a small subgroup of the desired group.
Recommendations
For NSS versions 3.21.x, consider updating to a newer version that addresses this issue, as no specific workaround is provided for these versions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improperly Implemented Security Check for Standard
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Nss
Red Hat
Suse
Ubuntu