https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:40:28 +0000 https://cve.radiocsirt.org/vuln/cve-2016-9074 <p><strong>Affected:</strong> Mozilla Thunderbird, Mozilla Firefox ESR, Mozilla Firefox</p> <p>An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.</p> <p><strong>Affected:</strong> Mozilla Thunderbird, Mozilla Firefox ESR, Mozilla Firefox</p> <p>An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.</p> https://cve.radiocsirt.org/vuln/cve-2016-9074 https://cve.radiocsirt.org/vuln/usn-3163-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nss, Ubuntu:16.04:LTS: nss</p> <p>It was discovered that NSS incorrectly handled certain invalid Diffie-Hellman keys. A remote attacker could possibly use this flaw to cause NSS to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-5285)</p> <p>Hubert Kario discovered that NSS incorrectly handled Diffie Hellman client key exchanges. A remote attacker could possibly use this flaw to perform a small subgroup confinement attack and recover private keys. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8635)</p> <p>Franziskus Kiefer discovered that NSS incorrectly mitigated certain timing side-channel attacks. A remote attacker could possibly use this flaw to recover private keys. (CVE-2016-9074)</p> <p>This update refreshes the NSS package to version 3.26.2 which includes the latest CA certificate bundle.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nss, Ubuntu:16.04:LTS: nss</p> <p>It was discovered that NSS incorrectly handled certain invalid Diffie-Hellman keys. A remote attacker could possibly use this flaw to cause NSS to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-5285)</p> <p>Hubert Kario discovered that NSS incorrectly handled Diffie Hellman client key exchanges. A remote attacker could possibly use this flaw to perform a small subgroup confinement attack and recover private keys. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-8635)</p> <p>Franziskus Kiefer discovered that NSS incorrectly mitigated certain timing side-channel attacks. A remote attacker could possibly use this flaw to recover private keys. (CVE-2016-9074)</p> <p>This update refreshes the NSS package to version 3.26.2 which includes the latest CA certificate bundle.</p> https://cve.radiocsirt.org/vuln/usn-3163-1