Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2018-12404 PUBLISHED CVSS 5.900000095367432 MEDIUM

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Risk Scores

CVSS v3.0
5.900000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Alpine:v3.20nss3.12.10-r0, 3.12.11-r0, 3.12.11-r1
Alpine:v3.9nss0, 3.39-r0, 3.38-r1
Alpine:v3.11nss3.39-r0, 0, 3.38-r1
Alpine:v3.12nss0, 3.12.10-r0, 3.12.11-r0
Alpine:v3.22nss3.39-r0, 0, 3.12.10-r0
Alpine:v3.19nss3.12.10-r0, 3.12.11-r0, 3.12.11-r1
Alpine:v3.10nss3.39-r0, 3.38-r1, 3.38-r0
Alpine:v3.23nss0, 0, 3.12.10-r0
Alpine:v3.21nss0, 3.39-r0, 3.38-r1

Timeline

References

Open in Interactive Console →