CVE-2018-12404 (retired)

Priority
Description
A cached side channel attack during handshakes using RSA encryption could
allow for the decryption of encrypted content. This is a variant of the
Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects
all NSS versions prior to NSS 3.41.
Assigned-to
mdeslaur
Package
Source: nss (LP Ubuntu Debian)
Upstream:released (3.36.6,3.40.1,2:3.41-1)
Ubuntu 12.04 ESM (Precise Pangolin):released (2:3.28.4-0ubuntu0.12.04.2)
Ubuntu 16.04 LTS (Xenial Xerus):released (2:3.28.4-0ubuntu0.16.04.4)
Ubuntu 18.04 LTS (Bionic Beaver):released (2:3.35-2ubuntu2.1)
Ubuntu 18.10 (Cosmic Cuttlefish):released (2:3.36.1-1ubuntu1.1)
Ubuntu 19.04 (Disco Dingo):released (2:3.42-1ubuntu1)
Patches:
Upstream:https://hg.mozilla.org/projects/nss/rev/4b966fea84c8 (3.41)
Upstream:https://hg.mozilla.org/projects/nss/rev/9d1be6a2e610 (3.41)
Upstream:https://hg.mozilla.org/projects/nss/rev/f5ef34273311 (3.41)
Upstream:https://hg.mozilla.org/projects/nss/rev/93b536c98e60 (3.36)
Upstream:https://hg.mozilla.org/projects/nss/rev/2ac9939c87cc (3.36)
Upstream:https://hg.mozilla.org/projects/nss/rev/f550aef6074c (3.36)
More Information

Updated: 2019-05-09 20:15:00 UTC (commit c89c82d76e7b8732f9a488bce7b6b31d0c3381fb)