CVE-2018-12404

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Published : 2019-05-02 17:29 Updated : 2019-07-20 12:15

4.3
CVSS Score More info
Score 4.3 / 10
4.3
Vendor Product Version URI
Mozilla Network Security Services - cpe:/a:mozilla:network_security_services:-
Mozilla Network Security Services 3.1 cpe:/a:mozilla:network_security_services:3.1
Mozilla Network Security Services 3.1.1 cpe:/a:mozilla:network_security_services:3.1.1
Mozilla Network Security Services 3.2 cpe:/a:mozilla:network_security_services:3.2
Mozilla Network Security Services 3.2.1 cpe:/a:mozilla:network_security_services:3.2.1
Mozilla Network Security Services 3.3 cpe:/a:mozilla:network_security_services:3.3
Mozilla Network Security Services 3.3.1 cpe:/a:mozilla:network_security_services:3.3.1
Mozilla Network Security Services 3.3.2 cpe:/a:mozilla:network_security_services:3.3.2
Mozilla Network Security Services 3.4 cpe:/a:mozilla:network_security_services:3.4
Mozilla Network Security Services 3.4.1 cpe:/a:mozilla:network_security_services:3.4.1
Mozilla Network Security Services 3.4.2 cpe:/a:mozilla:network_security_services:3.4.2
Mozilla Network Security Services 3.4.3 cpe:/a:mozilla:network_security_services:3.4.3
Mozilla Network Security Services 3.5 cpe:/a:mozilla:network_security_services:3.5
Mozilla Network Security Services 3.6 cpe:/a:mozilla:network_security_services:3.6
Mozilla Network Security Services 3.6.1 cpe:/a:mozilla:network_security_services:3.6.1
Mozilla Network Security Services 3.7 cpe:/a:mozilla:network_security_services:3.7
Mozilla Network Security Services 3.7.1 cpe:/a:mozilla:network_security_services:3.7.1
Mozilla Network Security Services 3.7.2 cpe:/a:mozilla:network_security_services:3.7.2
Mozilla Network Security Services 3.7.3 cpe:/a:mozilla:network_security_services:3.7.3
Mozilla Network Security Services 3.7.5 cpe:/a:mozilla:network_security_services:3.7.5
Mozilla Network Security Services 3.7.7 cpe:/a:mozilla:network_security_services:3.7.7
Mozilla Network Security Services 3.8 cpe:/a:mozilla:network_security_services:3.8
Mozilla Network Security Services 3.9 cpe:/a:mozilla:network_security_services:3.9
Mozilla Network Security Services 3.9.1 cpe:/a:mozilla:network_security_services:3.9.1
Mozilla Network Security Services 3.9.2 cpe:/a:mozilla:network_security_services:3.9.2
Mozilla Network Security Services 3.9.3 cpe:/a:mozilla:network_security_services:3.9.3
Mozilla Network Security Services 3.9.4 cpe:/a:mozilla:network_security_services:3.9.4
Mozilla Network Security Services 3.9.5 cpe:/a:mozilla:network_security_services:3.9.5
Mozilla Network Security Services 3.10 cpe:/a:mozilla:network_security_services:3.10
Mozilla Network Security Services 3.10.1 cpe:/a:mozilla:network_security_services:3.10.1
Mozilla Network Security Services 3.10.2 cpe:/a:mozilla:network_security_services:3.10.2
Mozilla Network Security Services 3.11 cpe:/a:mozilla:network_security_services:3.11
Mozilla Network Security Services 3.11.1 cpe:/a:mozilla:network_security_services:3.11.1
Mozilla Network Security Services 3.11.2 cpe:/a:mozilla:network_security_services:3.11.2
Mozilla Network Security Services 3.11.3 cpe:/a:mozilla:network_security_services:3.11.3
Mozilla Network Security Services 3.11.4 cpe:/a:mozilla:network_security_services:3.11.4
Mozilla Network Security Services 3.11.5 cpe:/a:mozilla:network_security_services:3.11.5
Mozilla Network Security Services 3.11.6 cpe:/a:mozilla:network_security_services:3.11.6
Mozilla Network Security Services 3.11.7 cpe:/a:mozilla:network_security_services:3.11.7
Mozilla Network Security Services 3.11.8 cpe:/a:mozilla:network_security_services:3.11.8
Mozilla Network Security Services 3.11.9 cpe:/a:mozilla:network_security_services:3.11.9
Mozilla Network Security Services 3.11.10 cpe:/a:mozilla:network_security_services:3.11.10
Mozilla Network Security Services 3.12 cpe:/a:mozilla:network_security_services:3.12
Mozilla Network Security Services 3.12.1 cpe:/a:mozilla:network_security_services:3.12.1
Mozilla Network Security Services 3.12.2 cpe:/a:mozilla:network_security_services:3.12.2
Mozilla Network Security Services 3.12.3 cpe:/a:mozilla:network_security_services:3.12.3
Mozilla Network Security Services 3.12.3.1 cpe:/a:mozilla:network_security_services:3.12.3.1
Mozilla Network Security Services 3.12.3.2 cpe:/a:mozilla:network_security_services:3.12.3.2
Mozilla Network Security Services 3.12.4 cpe:/a:mozilla:network_security_services:3.12.4
Mozilla Network Security Services 3.12.5 cpe:/a:mozilla:network_security_services:3.12.5
Mozilla Network Security Services 3.12.6 cpe:/a:mozilla:network_security_services:3.12.6
Mozilla Network Security Services 3.12.7 cpe:/a:mozilla:network_security_services:3.12.7
Mozilla Network Security Services 3.12.8 cpe:/a:mozilla:network_security_services:3.12.8
Mozilla Network Security Services 3.12.9 cpe:/a:mozilla:network_security_services:3.12.9
Mozilla Network Security Services 3.12.10 cpe:/a:mozilla:network_security_services:3.12.10
Mozilla Network Security Services 3.12.11 cpe:/a:mozilla:network_security_services:3.12.11
Mozilla Network Security Services 3.14 cpe:/a:mozilla:network_security_services:3.14
Mozilla Network Security Services 3.14.1 cpe:/a:mozilla:network_security_services:3.14.1
Mozilla Network Security Services 3.14.2 cpe:/a:mozilla:network_security_services:3.14.2
Mozilla Network Security Services 3.14.3 cpe:/a:mozilla:network_security_services:3.14.3
Mozilla Network Security Services 3.14.4 cpe:/a:mozilla:network_security_services:3.14.4
Mozilla Network Security Services 3.14.5 cpe:/a:mozilla:network_security_services:3.14.5
Mozilla Network Security Services 3.15 cpe:/a:mozilla:network_security_services:3.15
Mozilla Network Security Services 3.15.1 cpe:/a:mozilla:network_security_services:3.15.1
Mozilla Network Security Services 3.15.2 cpe:/a:mozilla:network_security_services:3.15.2
Mozilla Network Security Services 3.15.3 cpe:/a:mozilla:network_security_services:3.15.3
Mozilla Network Security Services 3.15.3.1 cpe:/a:mozilla:network_security_services:3.15.3.1
Mozilla Network Security Services 3.15.4 cpe:/a:mozilla:network_security_services:3.15.4
Mozilla Network Security Services 3.15.5 cpe:/a:mozilla:network_security_services:3.15.5
Mozilla Network Security Services 3.16 cpe:/a:mozilla:network_security_services:3.16
Mozilla Network Security Services 3.16.1 cpe:/a:mozilla:network_security_services:3.16.1
Mozilla Network Security Services 3.16.2 cpe:/a:mozilla:network_security_services:3.16.2
Mozilla Network Security Services 3.16.2.1 cpe:/a:mozilla:network_security_services:3.16.2.1
Mozilla Network Security Services 3.16.2.2 cpe:/a:mozilla:network_security_services:3.16.2.2
Mozilla Network Security Services 3.16.2.3 cpe:/a:mozilla:network_security_services:3.16.2.3
Mozilla Network Security Services 3.16.3 cpe:/a:mozilla:network_security_services:3.16.3
Mozilla Network Security Services 3.16.4 cpe:/a:mozilla:network_security_services:3.16.4
Mozilla Network Security Services 3.16.5 cpe:/a:mozilla:network_security_services:3.16.5
Mozilla Network Security Services 3.16.6 cpe:/a:mozilla:network_security_services:3.16.6
Mozilla Network Security Services 3.17 cpe:/a:mozilla:network_security_services:3.17
Mozilla Network Security Services 3.17.1 cpe:/a:mozilla:network_security_services:3.17.1
Mozilla Network Security Services 3.17.2 cpe:/a:mozilla:network_security_services:3.17.2
Mozilla Network Security Services 3.17.3 cpe:/a:mozilla:network_security_services:3.17.3
Mozilla Network Security Services 3.17.4 cpe:/a:mozilla:network_security_services:3.17.4
Mozilla Network Security Services 3.18 cpe:/a:mozilla:network_security_services:3.18
Mozilla Network Security Services 3.18.1 cpe:/a:mozilla:network_security_services:3.18.1
Mozilla Network Security Services 3.19 cpe:/a:mozilla:network_security_services:3.19
Mozilla Network Security Services 3.19.1 cpe:/a:mozilla:network_security_services:3.19.1
Mozilla Network Security Services 3.19.2 cpe:/a:mozilla:network_security_services:3.19.2
Mozilla Network Security Services 3.19.2.0 cpe:/a:mozilla:network_security_services:3.19.2.0
Mozilla Network Security Services 3.19.3 cpe:/a:mozilla:network_security_services:3.19.3
Mozilla Network Security Services 3.20 cpe:/a:mozilla:network_security_services:3.20
Mozilla Network Security Services 3.20.0 cpe:/a:mozilla:network_security_services:3.20.0
Mozilla Network Security Services 3.20.1 cpe:/a:mozilla:network_security_services:3.20.1
Mozilla Network Security Services 3.21 cpe:/a:mozilla:network_security_services:3.21
Mozilla Network Security Services 3.21.1 cpe:/a:mozilla:network_security_services:3.21.1
Mozilla Network Security Services 3.21.2 cpe:/a:mozilla:network_security_services:3.21.2
Mozilla Network Security Services 3.21.3 cpe:/a:mozilla:network_security_services:3.21.3
Mozilla Network Security Services 3.21.4 cpe:/a:mozilla:network_security_services:3.21.4
Mozilla Network Security Services 3.22 cpe:/a:mozilla:network_security_services:3.22
Mozilla Network Security Services 3.22.1 cpe:/a:mozilla:network_security_services:3.22.1
Mozilla Network Security Services 3.22.2 cpe:/a:mozilla:network_security_services:3.22.2
Mozilla Network Security Services 3.23 cpe:/a:mozilla:network_security_services:3.23
Mozilla Network Security Services 3.24 cpe:/a:mozilla:network_security_services:3.24
Mozilla Network Security Services 3.25 cpe:/a:mozilla:network_security_services:3.25
Mozilla Network Security Services 3.25.0 cpe:/a:mozilla:network_security_services:3.25.0
Mozilla Network Security Services 3.25.1 cpe:/a:mozilla:network_security_services:3.25.1
Mozilla Network Security Services 3.26 cpe:/a:mozilla:network_security_services:3.26
Mozilla Network Security Services 3.26.0 cpe:/a:mozilla:network_security_services:3.26.0
Mozilla Network Security Services 3.26.2 cpe:/a:mozilla:network_security_services:3.26.2
Mozilla Network Security Services 3.27 cpe:/a:mozilla:network_security_services:3.27
Mozilla Network Security Services 3.27.0 cpe:/a:mozilla:network_security_services:3.27.0
Mozilla Network Security Services 3.27.1 cpe:/a:mozilla:network_security_services:3.27.1
Mozilla Network Security Services 3.27.2 cpe:/a:mozilla:network_security_services:3.27.2
Mozilla Network Security Services 3.28 cpe:/a:mozilla:network_security_services:3.28
Mozilla Network Security Services 3.28.0 cpe:/a:mozilla:network_security_services:3.28.0
Mozilla Network Security Services 3.28.1 cpe:/a:mozilla:network_security_services:3.28.1
Mozilla Network Security Services 3.28.2 cpe:/a:mozilla:network_security_services:3.28.2
Mozilla Network Security Services 3.28.3 cpe:/a:mozilla:network_security_services:3.28.3
Mozilla Network Security Services 3.28.4 cpe:/a:mozilla:network_security_services:3.28.4
Mozilla Network Security Services 3.28.5 cpe:/a:mozilla:network_security_services:3.28.5
Mozilla Network Security Services 3.29 cpe:/a:mozilla:network_security_services:3.29
Mozilla Network Security Services 3.29.1 cpe:/a:mozilla:network_security_services:3.29.1
Mozilla Network Security Services 3.29.2 cpe:/a:mozilla:network_security_services:3.29.2
Mozilla Network Security Services 3.29.3 cpe:/a:mozilla:network_security_services:3.29.3
Mozilla Network Security Services 3.29.5 cpe:/a:mozilla:network_security_services:3.29.5
Mozilla Network Security Services 3.30 cpe:/a:mozilla:network_security_services:3.30
Mozilla Network Security Services 3.30.1 cpe:/a:mozilla:network_security_services:3.30.1
Mozilla Network Security Services 3.30.2 cpe:/a:mozilla:network_security_services:3.30.2
Mozilla Network Security Services 3.31 cpe:/a:mozilla:network_security_services:3.31
Mozilla Network Security Services 3.31.1 cpe:/a:mozilla:network_security_services:3.31.1
Mozilla Network Security Services 3.32 cpe:/a:mozilla:network_security_services:3.32
Mozilla Network Security Services 3.33 cpe:/a:mozilla:network_security_services:3.33
Mozilla Network Security Services 3.34 cpe:/a:mozilla:network_security_services:3.34
Mozilla Network Security Services 3.34.1 cpe:/a:mozilla:network_security_services:3.34.1
Mozilla Network Security Services 3.35 cpe:/a:mozilla:network_security_services:3.35
Mozilla Network Security Services 3.36 cpe:/a:mozilla:network_security_services:3.36
Mozilla Network Security Services 3.36.1 cpe:/a:mozilla:network_security_services:3.36.1
Mozilla Network Security Services 3.36.2 cpe:/a:mozilla:network_security_services:3.36.2
Mozilla Network Security Services 3.36.4 cpe:/a:mozilla:network_security_services:3.36.4
Mozilla Network Security Services 3.37 cpe:/a:mozilla:network_security_services:3.37
Mozilla Network Security Services 3.37.1 cpe:/a:mozilla:network_security_services:3.37.1
Mozilla Network Security Services 3.37.3 cpe:/a:mozilla:network_security_services:3.37.3
Mozilla Network Security Services 3.38 cpe:/a:mozilla:network_security_services:3.38
Mozilla Network Security Services 3.39 cpe:/a:mozilla:network_security_services:3.39
  1. Mozilla (1) Search CVE
    1. Network Security Services (145) Search CVE
      1. -
      2. 3.1
      3. 3.1.1
      4. 3.2
      5. 3.2.1
      6. 3.3
      7. 3.3.1
      8. 3.3.2
      9. 3.4
      10. 3.4.1
      11. 3.4.2
      12. 3.4.3
      13. 3.5
      14. 3.6
      15. 3.6.1
      16. 3.7
      17. 3.7.1
      18. 3.7.2
      19. 3.7.3
      20. 3.7.5
      21. 3.7.7
      22. 3.8
      23. 3.9
      24. 3.9.1
      25. 3.9.2
      26. 3.9.3
      27. 3.9.4
      28. 3.9.5
      29. 3.10
      30. 3.10.1
      31. 3.10.2
      32. 3.11
      33. 3.11.1
      34. 3.11.2
      35. 3.11.3
      36. 3.11.4
      37. 3.11.5
      38. 3.11.6
      39. 3.11.7
      40. 3.11.8
      41. 3.11.9
      42. 3.11.10
      43. 3.12
      44. 3.12.1
      45. 3.12.2
      46. 3.12.3
      47. 3.12.3.1
      48. 3.12.3.2
      49. 3.12.4
      50. 3.12.5
      51. 3.12.6
      52. 3.12.7
      53. 3.12.8
      54. 3.12.9
      55. 3.12.10
      56. 3.12.11
      57. 3.14
      58. 3.14.1
      59. 3.14.2
      60. 3.14.3
      61. 3.14.4
      62. 3.14.5
      63. 3.15
      64. 3.15.1
      65. 3.15.2
      66. 3.15.3
      67. 3.15.3.1
      68. 3.15.4
      69. 3.15.5
      70. 3.16
      71. 3.16.1
      72. 3.16.2
      73. 3.16.2.1
      74. 3.16.2.2
      75. 3.16.2.3
      76. 3.16.3
      77. 3.16.4
      78. 3.16.5
      79. 3.16.6
      80. 3.17
      81. 3.17.1
      82. 3.17.2
      83. 3.17.3
      84. 3.17.4
      85. 3.18
      86. 3.18.1
      87. 3.19
      88. 3.19.1
      89. 3.19.2
      90. 3.19.2.0
      91. 3.19.3
      92. 3.20
      93. 3.20.0
      94. 3.20.1
      95. 3.21
      96. 3.21.1
      97. 3.21.2
      98. 3.21.3
      99. 3.21.4
      100. 3.22
      101. 3.22.1
      102. 3.22.2
      103. 3.23
      104. 3.24
      105. 3.25
      106. 3.25.0
      107. 3.25.1
      108. 3.26
      109. 3.26.0
      110. 3.26.2
      111. 3.27
      112. 3.27.0
      113. 3.27.1
      114. 3.27.2
      115. 3.28
      116. 3.28.0
      117. 3.28.1
      118. 3.28.2
      119. 3.28.3
      120. 3.28.4
      121. 3.28.5
      122. 3.29
      123. 3.29.1
      124. 3.29.2
      125. 3.29.3
      126. 3.29.5
      127. 3.30
      128. 3.30.1
      129. 3.30.2
      130. 3.31
      131. 3.31.1
      132. 3.32
      133. 3.33
      134. 3.34
      135. 3.34.1
      136. 3.35
      137. 3.36
      138. 3.36.1
      139. 3.36.2
      140. 3.36.4
      141. 3.37
      142. 3.37.1
      143. 3.37.3
      144. 3.38
      145. 3.39

CWE

ID Name Description Links
CWE-310 Cryptographic Issues Weaknesses in this category are related to the use of cryptography. CVE

History of changes

Date Event
2019-07-20 12:15
2019-05-03 14:31
2019-05-02 17:29

New CVE