RHSA-2023:1252: Important: nss security update
Published Mar 15, 2023
·Updated
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.Security Fix(es): nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
68 affected componentsFixes available
redhat/nss<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-debugsource<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-debugsource<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-sysinit<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-sysinit-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-sysinit-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-tools<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-tools-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-tools-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-sysinit<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-tools<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-debugsource<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-softokn-freebl-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-sysinit<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-sysinit-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-tools<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-tools-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util-debuginfo<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss-util-devel<3.79.0-11.el8_7
3.79.0-11.el8_7
redhat/nss<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-debuginfo<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-debugsource<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-devel<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-softokn<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-softokn-debuginfo<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-softokn-devel<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-softokn-freebl<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-softokn-freebl-debuginfo<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-softokn-freebl-devel<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-sysinit<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-sysinit-debuginfo<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-tools<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-tools-debuginfo<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-util<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-util-debuginfo<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
redhat/nss-util-devel<3.79.0-11.el8_7.aa
3.79.0-11.el8_7.aa
Remediation
Event History
Aug 7, 2024
Advisory Published
via Red Hat·05:04 AM
Frequently Asked Questions
1
What is the severity of RHSA-2023:1252?
The severity of RHSA-2023:1252 is classified as critical due to the potential for arbitrary memory write.
2
How do I fix RHSA-2023:1252?
To fix RHSA-2023:1252, update to the package version 3.79.0-11.el8_7 or later.
3
Which software is affected by RHSA-2023:1252?
RHSA-2023:1252 affects multiple packages including nss, nss-devel, and nss-softokn among others.
4
What specific vulnerability is addressed in RHSA-2023:1252?
RHSA-2023:1252 addresses a vulnerability identified as CVE-2023-0767, which involves an arbitrary memory write.
5
What are the potential impacts of not addressing RHSA-2023:1252?
Not addressing RHSA-2023:1252 could lead to exploitations allowing attackers to execute arbitrary code.