Vulnerability · Published Dec 8, 2021 · Assigned by mozilla
CVE-2021-43527
Critical 9.8
In plain English
A critical-severity security flaw in NSS from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 17.6% (higher than 97% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | nss | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-devel | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-softokn | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-softokn-devel | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-softokn-freebl | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-softokn-freebl-devel | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-sysinit | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-tools | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-util | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| AlmaLinux:8 | nss-util-devel | 3.67.0-7.el8_5 | ALSA-2021:4903 |
| Alpine:v3.20 | nss | 3.73-r0 | ALPINE-CVE-2021-43527 |
| Alpine:v3.21 | nss | 3.73-r0 | ALPINE-CVE-2021-43527 |
| Alpine:v3.22 | nss | 3.73-r0 | ALPINE-CVE-2021-43527 |
| Alpine:v3.23 | nss | 3.73-r0 | ALPINE-CVE-2021-43527 |
| Alpine:v3.24 | nss | 3.73-r0 | ALPINE-CVE-2021-43527 |
| Debian:12 | nss | 2:3.73-1 | DEBIAN-CVE-2021-43527 |
| Debian:13 | nss | 2:3.73-1 | DEBIAN-CVE-2021-43527 |
| Debian:14 | nss | 2:3.73-1 | DEBIAN-CVE-2021-43527 |
| Rocky Linux:8 | nss | 0:3.67.0-7.el8_5 | RLSA-2021:4903 |
| Ubuntu:22.04:LTS | nss | 2:3.68-1ubuntu2 | UBUNTU-CVE-2021-43527 |
| Ubuntu:22.04:LTS | thunderbird | 1:91.4.0+build1.1-0ubuntu1 | UBUNTU-CVE-2021-43527 |
Affected products (as reported)
References
- https://www.mozilla.org/security/advisories/mfsa2021-51/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1737470
- https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_73_RTM/
- https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://security.netapp.com/advisory/ntap-20211229-0002/
- https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf
- https://www.starwindsoftware.com/security/sw-20220802-0001/
- GLSA-202212-05 vendor-advisory