https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:44:04 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2020-12403 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-12403 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cnvd-2020-43765 cnvd-2020-43765 https://cve.radiocsirt.org/vuln/cnvd-2020-43765 https://cve.radiocsirt.org/vuln/euvd-2026-41236 EUVD-2026-41236 https://cve.radiocsirt.org/vuln/euvd-2026-41236 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12403 <p>A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.</p> <p>A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-12403 https://cve.radiocsirt.org/vuln/ghsa-9h25-47mw-52hh <p>A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.</p> <p>A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-9h25-47mw-52hh https://cve.radiocsirt.org/vuln/gsd-2020-12403 gsd-2020-12403 https://cve.radiocsirt.org/vuln/gsd-2020-12403 https://cve.radiocsirt.org/vuln/msrc_cve-2020-12403 msrc_CVE-2020-12403 https://cve.radiocsirt.org/vuln/msrc_cve-2020-12403 https://cve.radiocsirt.org/vuln/oesa-2021-1115 <p><strong>Affected:</strong> openEuler:20.03-LTS: nss</p> <p>Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. Security Fix(es): A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.(CVE-2020-12403)</p> <p>A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.(CVE-2020-25648)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: nss</p> <p>Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. Security Fix(es): A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.(CVE-2020-12403)</p> <p>A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.(CVE-2020-25648)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1115 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11058-1 <p>libfreebl3-3.69.1-1.2 on GA media</p> <p>libfreebl3-3.69.1-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11058-1 https://cve.radiocsirt.org/vuln/rhsa-2021:0758 <p>nss: Use-after-free in sftk_FreeSession due to improper refcounting nss: Check length of inputs for cryptographic primitives nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read</p> <p>nss: Use-after-free in sftk_FreeSession due to improper refcounting nss: Check length of inputs for cryptographic primitives nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0758 https://cve.radiocsirt.org/vuln/suse-ru-2021:14818-1 <p>Recommended update for mozilla-nspr, mozilla-nss</p> <p>Recommended update for mozilla-nspr, mozilla-nss</p> https://cve.radiocsirt.org/vuln/suse-ru-2021:14818-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12403 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nss, Ubuntu:16.04:LTS: nss, Ubuntu:18.04:LTS: nss, Ubuntu:20.04:LTS: nss</p> <p>A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nss, Ubuntu:16.04:LTS: nss, Ubuntu:18.04:LTS: nss, Ubuntu:20.04:LTS: nss</p> <p>A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12403 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1831 <p>Ein Angreifer kann eine Schwachstelle in Mozilla NSS ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann eine Schwachstelle in Mozilla NSS ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1831