USN-6727-1: NSS vulnerabilities
It was discovered that NSS incorrectly handled padding when checking PKCS#1 certificates. A remote attacker could possibly use this issue to perform Bleichenbacher-like attacks and recover private data. This issue only affected Ubuntu 20.04 LTS. (CVE-2023-4421) It was discovered that NSS had a timing side-channel when performing RSA decryption. A remote attacker could possibly use this issue to recover private data. (CVE-2023-5388) It was discovered that NSS had a timing side-channel when using certain NIST curves. A remote attacker could possibly use this issue to recover private data. (CVE-2023-6135) The NSS package contained outdated CA certificates. This update refreshes the NSS package to version 3.98 which includes the latest CA certificate bundle and other security improvements.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.98-0ubuntu0.23.10.1 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.98-0ubuntu0.22.04.1 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.98-0ubuntu0.20.04.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.98
Event History
Frequently Asked Questions
What is the severity of USN-6727-1?
The severity of USN-6727-1 is high due to the potential for remote attackers to exploit the vulnerability to recover private data.
How do I fix USN-6727-1?
To fix USN-6727-1, update the libnss3 package to the recommended versions for your Ubuntu release.
Which versions of Ubuntu are affected by USN-6727-1?
USN-6727-1 affects Ubuntu 20.04 LTS, 22.04 LTS, and 23.10.
What kind of attacks is USN-6727-1 associated with?
USN-6727-1 is associated with Bleichenbacher-like attacks, which can allow remote attackers to recover private data.
Is there a specific version of libnss3 that resolves USN-6727-1?
Yes, the specific versions to resolve USN-6727-1 are libnss3 version 2:3.98-0ubuntu0.23.10.1 for 23.10, 2:3.98-0ubuntu0.22.04.1 for 22.04, and 2:3.98-0ubuntu0.20.04.1 for 20.04.