CveMateVulnerability intelligence

NSS vulnerabilities

1 vulnerability

Known vulnerabilities in NSS products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1

Network Security Services (Nss)1 vulnerabilities

CVE-2018-12384alpinenss+157y ago29-04-2019 14:22

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.