Log in Start free

Vulnerability · Published May 27, 2021 · Assigned by mozilla

CVE-2020-12403

Critical 9.1

In plain English

A critical-severity out-of-bounds read in nss. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 75% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.1Critical
Exploit odds (30 days)1.5%top 25.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20nss3.55-r0ALPINE-CVE-2020-12403
Alpine:v3.21nss3.55-r0ALPINE-CVE-2020-12403
Alpine:v3.22nss3.55-r0ALPINE-CVE-2020-12403
Alpine:v3.23nss3.55-r0ALPINE-CVE-2020-12403
Alpine:v3.24nss3.55-r0ALPINE-CVE-2020-12403
Debian:12nss2:3.55-1DEBIAN-CVE-2020-12403
Debian:13nss2:3.55-1DEBIAN-CVE-2020-12403
Debian:14nss2:3.55-1DEBIAN-CVE-2020-12403
Rocky Linux:8nss0:3.53.1-17.el8_3RLSA-2021:0538

Affected products (as reported)

VendorProductVersions
n/a nss nss 3.55

Weakness: CWE-125

References