VDB
SUSE-SU-2020%3A1839-1
SUSE-SU-2020%3A1839-1
PUBLISHED
CVSS 8.699999809265137 HIGH
Record from OSV · Published July 3, 2020
Security update for mozilla-nspr, mozilla-nss
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| mozilla-nss | SUSE:Linux Enterprise Server 12 SP3-BCL | 3.53.1-58.48.1 |
| mozilla-nss | SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | 3.53.1-58.48.1 |
| mozilla-nspr | SUSE:Linux Enterprise Server 12 SP3-LTSS | 4.25-19.15.1 |
| mozilla-nspr | SUSE:Linux Enterprise Server 12 SP5 | 4.25-19.15.1 |
| mozilla-nspr | SUSE:OpenStack Cloud 8 | 4.25-19.15.1 |
| mozilla-nss | SUSE:Linux Enterprise Server 12 SP2-LTSS | 3.53.1-58.48.1 |
| mozilla-nss | SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | 3.53.1-58.48.1 |
| mozilla-nspr | SUSE:OpenStack Cloud 7 | 4.25-19.15.1 |
| mozilla-nss | SUSE:OpenStack Cloud Crowbar 8 | 3.53.1-58.48.1 |
| mozilla-nspr | SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | 4.25-19.15.1 |
| mozilla-nspr | SUSE:OpenStack Cloud Crowbar 9 | 4.25-19.15.1 |
| mozilla-nss | SUSE:OpenStack Cloud 7 | 3.53.1-58.48.1 |
24 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:Linux Enterprise Server 12 SP3-BCL | mozilla-nss | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | mozilla-nss | 0 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | mozilla-nspr | 0 |
| SUSE:Linux Enterprise Server 12 SP5 | mozilla-nspr | 0 |
| SUSE:OpenStack Cloud 8 | mozilla-nspr | 0 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | mozilla-nss | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nss | 0 |
| SUSE:OpenStack Cloud 7 | mozilla-nspr | 0 |
| SUSE:OpenStack Cloud Crowbar 8 | mozilla-nss | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | mozilla-nspr | 0 |
| SUSE:OpenStack Cloud Crowbar 9 | mozilla-nspr | 0 |
| SUSE:OpenStack Cloud 7 | mozilla-nss | 0 |
| SUSE:OpenStack Cloud 9 | mozilla-nspr | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nspr | 0 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | mozilla-nspr | 0 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | mozilla-nss | 0 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | mozilla-nspr | 0 |
| SUSE:Enterprise Storage 5 | mozilla-nspr | 0 |
| SUSE:OpenStack Cloud Crowbar 9 | mozilla-nss | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | mozilla-nss | 0 |
…and 16 more
Timeline
- Jul 3, 2020 CVE Published
- Sep 20, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln SUSE-SU-2020%3A1839-1
vulnetix vdb fixes SUSE-SU-2020%3A1839-1
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2020%253A1839-1/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://bugzilla.suse.com/1159819 report
- https://bugzilla.suse.com/1170908 report
- https://bugzilla.suse.com/1171978 report
- https://www.suse.com/security/cve/CVE-2020-12402 url
- https://www.suse.com/support/update/announcement/2020/suse-su-20201839-1/ advisory
- https://bugzilla.suse.com/1168669 report
- https://bugzilla.suse.com/1169746 report
- https://bugzilla.suse.com/1173022 report
- https://www.suse.com/security/cve/CVE-2019-17006 url
- https://www.suse.com/security/cve/CVE-2020-12399 url