CVE-2018-12404: Infoleak
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
Other sources
An issue was found in nss before version 3.36.6. The TLS implementation exposes padding oracle in each of the three stages of handling PKCS #1 v1.5 padding
References: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.36.6releasenotes http://cat.eyalro.net/
— Red Hat
Mozilla Network Security Services (NSS), as used in Mozilla Firefox, could allow a local attacker to obtain sensitive information, caused by a cache side-channel variant of the Bleichenbacher attack in the handling of PKCS #1 v1.5 padding by the TLS implementation. An attacker could exploit this vulnerability to obtain secret encryption keys of running applications and hijack connections and accounts.
— IBM
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2018-12404?
CVE-2018-12404 is a vulnerability that allows for the decryption of encrypted content through a cached side channel attack during handshakes using RSA encryption.
Which versions of NSS are affected by CVE-2018-12404?
All versions of NSS prior to NSS 3.41 are affected by CVE-2018-12404.
How severe is CVE-2018-12404?
CVE-2018-12404 has a severity rating of 5.9, considered medium severity.
How can I fix CVE-2018-12404?
To fix CVE-2018-12404, update to NSS version 3.41 or later.
Where can I find more information about CVE-2018-12404?
You can find more information about CVE-2018-12404 at the following references: [Mozilla NSS 3.36.6 Release Notes](https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.6_release_notes), [CAT (Cryptographic Attacks Tests) - Cached RSA side channel attack](http://cat.eyalro.net/), [Mozilla NSS 3.40.1 Release Notes](https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.40.1_release_notes).