RHSA-2023:1370: Important: nss security update
Published Mar 21, 2023
·Updated
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.Security Fix(es): nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
68 affected componentsFixes available
redhat/nss<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-debugsource<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-debugsource<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-sysinit<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-sysinit-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-sysinit-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-tools<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-tools-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-tools-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-sysinit<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-tools<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-debugsource<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-softokn-freebl-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-sysinit<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-sysinit-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-tools<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-tools-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util-debuginfo<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss-util-devel<3.67.0-8.el8_4
3.67.0-8.el8_4
redhat/nss<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-debuginfo<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-debugsource<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-devel<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-softokn<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-softokn-debuginfo<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-softokn-devel<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-softokn-freebl<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-softokn-freebl-debuginfo<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-softokn-freebl-devel<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-sysinit<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-sysinit-debuginfo<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-tools<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-tools-debuginfo<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-util<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-util-debuginfo<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
redhat/nss-util-devel<3.67.0-8.el8_4.aa
3.67.0-8.el8_4.aa
Remediation
Event History
Mar 30, 2026
Advisory Published
via Red Hat·09:54 PM
Data Sourced
via Red Hat·09:54 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2023:1370?
The severity of RHSA-2023:1370 is classified as critical due to the potential for arbitrary memory write vulnerabilities.
2
How do I fix RHSA-2023:1370?
To fix RHSA-2023:1370, you should update your NSS package to version 3.67.0-8.el8_4 or later.
3
What vulnerability does RHSA-2023:1370 address?
RHSA-2023:1370 addresses a vulnerability identified as CVE-2023-0767, which involves an arbitrary memory write via PKCS 12.
4
Which systems are affected by RHSA-2023:1370?
RHSA-2023:1370 affects systems using NSS versions prior to 3.67.0-8.el8_4.
5
Is there a known exploit for RHSA-2023:1370?
As of now, there are no publicly known exploits specific to RHSA-2023:1370.