Oval Definition:oval:org.mitre.oval:def:21177
Revision Date:2014-02-17Version:39
Title:RHSA-2013:1144: nss, nss-util, nss-softokn, and nspr security update (Moderate)
Description:The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CESA-2013:1144
CVE-2013-0791
CVE-2013-1620
RHSA-2013:1144-00
Platform(s):CentOS Linux 6
Red Hat Enterprise Linux 6
Product(s):nspr
nss
nss-softokn
nss-util
Definition Synopsis
  • Redhat 6 or Centos 6 release
  • The operating system installed on the system is Red Hat Enterprise Linux 6
  • OR The operating system installed on the system is CentOS Linux 6.x
  • AND Packages section
  • nspr is earlier than 0:4.9.5-2.el6_4
  • OR nspr-devel is earlier than 0:4.9.5-2.el6_4
  • OR nss-softokn-freebl is earlier than 0:3.14.3-3.el6_4
  • OR nss-softokn-freebl-devel is earlier than 0:3.14.3-3.el6_4
  • OR nss-softokn-devel is earlier than 0:3.14.3-3.el6_4
  • OR nss-softokn is earlier than 0:3.14.3-3.el6_4
  • OR nss-pkcs11-devel is earlier than 0:3.14.3-4.el6_4
  • OR nss-tools is earlier than 0:3.14.3-4.el6_4
  • OR nss-devel is earlier than 0:3.14.3-4.el6_4
  • OR nss is earlier than 0:3.14.3-4.el6_4
  • OR nss-sysinit is earlier than 0:3.14.3-4.el6_4
  • OR nss-util-devel is earlier than 0:3.14.3-3.el6_4
  • OR nss-util is earlier than 0:3.14.3-3.el6_4
  • BACK