Home

CVE-2020-12403

Description

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.

Risk Information

Base Score
9.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score
Exploitation Probability
0.578

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.3Windows
Network Security Service library (USN-4476-1) libnss3_3.35-2ubuntu2.12_i386.debLinux
Network Security Service library (USN-4476-1) libnss3_3.35-2ubuntu2.12_amd64.debLinux
Network Security Service library (USN-4476-1) libnss3_3.49.1-1ubuntu1.5_i386.debLinux
Network Security Service library (USN-4476-1) libnss3_3.49.1-1ubuntu1.5_amd64.debLinux
Network Security Service library (USN-4476-1) libnss3_3.28.4-0ubuntu0.16.04.14_i386.debLinux
Network Security Service library (USN-4476-1) libnss3_3.28.4-0ubuntu0.16.04.14_amd64.debLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nspr-4.25.0-2.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nspr-4.25.0-2.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nspr-devel-4.25.0-2.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nspr-devel-4.25.0-2.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-3.53.1-3.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-3.53.1-3.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-devel-3.53.1-3.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-devel-3.53.1-3.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-pkcs11-devel-3.53.1-3.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-pkcs11-devel-3.53.1-3.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-3.53.1-6.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-3.53.1-6.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-devel-3.53.1-6.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-devel-3.53.1-6.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-freebl-3.53.1-6.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-freebl-3.53.1-6.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-freebl-devel-3.53.1-6.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-freebl-devel-3.53.1-6.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-sysinit-3.53.1-3.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-tools-3.53.1-3.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-util-3.53.1-1.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-util-3.53.1-1.el7_9.x86_64.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-util-devel-3.53.1-1.el7_9.i686.rpmLinux
(RHSA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-util-devel-3.53.1-1.el7_9.x86_64.rpmLinux
Nspr update (ELSA-2020-4076) nspr-4.25.0-2.el7_9.x86_64.rpmLinux
Nspr-devel update (ELSA-2020-4076) nspr-devel-4.25.0-2.el7_9.x86_64.rpmLinux
Nss update (ELSA-2020-4076) nss-3.53.1-3.el7_9.x86_64.rpmLinux
Nss-devel update (ELSA-2020-4076) nss-devel-3.53.1-3.el7_9.x86_64.rpmLinux
Nss-pkcs11-devel update (ELSA-2020-4076) nss-pkcs11-devel-3.53.1-3.el7_9.x86_64.rpmLinux
Nss-softokn update (ELSA-2020-4076) nss-softokn-3.53.1-6.0.1.el7_9.x86_64.rpmLinux
Nss-softokn-devel update (ELSA-2020-4076) nss-softokn-devel-3.53.1-6.0.1.el7_9.x86_64.rpmLinux
Nss-softokn-freebl update (ELSA-2020-4076) nss-softokn-freebl-3.53.1-6.0.1.el7_9.x86_64.rpmLinux
Nss-softokn-freebl-devel update (ELSA-2020-4076) nss-softokn-freebl-devel-3.53.1-6.0.1.el7_9.x86_64.rpmLinux
Nss-sysinit update (ELSA-2020-4076) nss-sysinit-3.53.1-3.el7_9.x86_64.rpmLinux
Nss-tools update (ELSA-2020-4076) nss-tools-3.53.1-3.el7_9.x86_64.rpmLinux
Nss-util update (ELSA-2020-4076) nss-util-3.53.1-1.el7_9.x86_64.rpmLinux
Nss-util-devel update (ELSA-2020-4076) nss-util-devel-3.53.1-1.el7_9.x86_64.rpmLinux
Nspr update (ELSA-2020-4076) nspr-4.25.0-2.el7_9.i686.rpmLinux
Nspr-devel update (ELSA-2020-4076) nspr-devel-4.25.0-2.el7_9.i686.rpmLinux
Nss update (ELSA-2020-4076) nss-3.53.1-3.el7_9.i686.rpmLinux
Nss-devel update (ELSA-2020-4076) nss-devel-3.53.1-3.el7_9.i686.rpmLinux
Nss-pkcs11-devel update (ELSA-2020-4076) nss-pkcs11-devel-3.53.1-3.el7_9.i686.rpmLinux
Nss-softokn update (ELSA-2020-4076) nss-softokn-3.53.1-6.0.1.el7_9.i686.rpmLinux
Nss-softokn-devel update (ELSA-2020-4076) nss-softokn-devel-3.53.1-6.0.1.el7_9.i686.rpmLinux
Nss-softokn-freebl update (ELSA-2020-4076) nss-softokn-freebl-3.53.1-6.0.1.el7_9.i686.rpmLinux
Nss-softokn-freebl-devel update (ELSA-2020-4076) nss-softokn-freebl-devel-3.53.1-6.0.1.el7_9.i686.rpmLinux
Nss-util update (ELSA-2020-4076) nss-util-3.53.1-1.el7_9.i686.rpmLinux
Nss-util-devel update (ELSA-2020-4076) nss-util-devel-3.53.1-1.el7_9.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-debugsource-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-debugsource-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-devel-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-devel-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-softokn-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-softokn-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-softokn-devel-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-softokn-devel-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-softokn-freebl-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-softokn-freebl-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-softokn-freebl-devel-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-softokn-freebl-devel-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-sysinit-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-tools-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-util-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-util-3.53.1-17.el8_3.x86_64.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-util-devel-3.53.1-17.el8_3.i686.rpmLinux
(RHSA-2021:0538) nss security and bug fix update nss-util-devel-3.53.1-17.el8_3.x86_64.rpmLinux
Nss update (ELSA-2021-0538) nss-3.53.1-17.el8_3.i686.rpmLinux
Nss update (ELSA-2021-0538) nss-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-devel update (ELSA-2021-0538) nss-devel-3.53.1-17.el8_3.i686.rpmLinux
Nss-devel update (ELSA-2021-0538) nss-devel-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-softokn update (ELSA-2021-0538) nss-softokn-3.53.1-17.el8_3.i686.rpmLinux
Nss-softokn update (ELSA-2021-0538) nss-softokn-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-softokn-devel update (ELSA-2021-0538) nss-softokn-devel-3.53.1-17.el8_3.i686.rpmLinux
Nss-softokn-devel update (ELSA-2021-0538) nss-softokn-devel-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-softokn-freebl update (ELSA-2021-0538) nss-softokn-freebl-3.53.1-17.el8_3.i686.rpmLinux
Nss-softokn-freebl update (ELSA-2021-0538) nss-softokn-freebl-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-softokn-freebl-devel update (ELSA-2021-0538) nss-softokn-freebl-devel-3.53.1-17.el8_3.i686.rpmLinux
Nss-softokn-freebl-devel update (ELSA-2021-0538) nss-softokn-freebl-devel-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-sysinit update (ELSA-2021-0538) nss-sysinit-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-tools update (ELSA-2021-0538) nss-tools-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-util update (ELSA-2021-0538) nss-util-3.53.1-17.el8_3.i686.rpmLinux
Nss-util update (ELSA-2021-0538) nss-util-3.53.1-17.el8_3.x86_64.rpmLinux
Nss-util-devel update (ELSA-2021-0538) nss-util-devel-3.53.1-17.el8_3.i686.rpmLinux
Nss-util-devel update (ELSA-2021-0538) nss-util-devel-3.53.1-17.el8_3.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-3.53.1-3.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-3.53.1-3.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-devel-3.53.1-3.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-devel-3.53.1-3.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-pkcs11-devel-3.53.1-3.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-pkcs11-devel-3.53.1-3.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-3.53.1-6.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-3.53.1-6.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-devel-3.53.1-6.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-devel-3.53.1-6.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-freebl-3.53.1-6.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-freebl-3.53.1-6.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-freebl-devel-3.53.1-6.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-softokn-freebl-devel-3.53.1-6.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-sysinit-3.53.1-3.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-tools-3.53.1-3.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-util-3.53.1-1.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-util-3.53.1-1.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-util-devel-3.53.1-1.el7_9.i686.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nss-util-devel-3.53.1-1.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nspr-4.25.0-2.el7_9.x86_64.rpmLinux
(CESA-2020:4076) nss and nspr security, bug fix, and enhancement update nspr-devel-4.25.0-2.el7_9.x86_64.rpmLinux
(RHSA-2020:4076)Moderate: and nspr security, bug fix, and enhancement update nspr-debuginfo-4.25.0-2.el7_9.i686.rpmLinux
(RHSA-2020:4076)Moderate: and nspr security, bug fix, and enhancement update nspr-debuginfo-4.25.0-2.el7_9.x86_64.rpmLinux
(RHSA-2020:4076)Moderate: and nspr security, bug fix, and enhancement update nss-debuginfo-3.53.1-3.el7_9.i686.rpmLinux
(RHSA-2020:4076)Moderate: and nspr security, bug fix, and enhancement update nss-debuginfo-3.53.1-3.el7_9.x86_64.rpmLinux
(RHSA-2020:4076)Moderate: and nspr security, bug fix, and enhancement update nss-softokn-debuginfo-3.53.1-6.el7_9.i686.rpmLinux
(RHSA-2020:4076)Moderate: and nspr security, bug fix, and enhancement update nss-softokn-debuginfo-3.53.1-6.el7_9.x86_64.rpmLinux
(RHSA-2020:4076)Moderate: and nspr security, bug fix, and enhancement update nss-util-debuginfo-3.53.1-1.el7_9.i686.rpmLinux
(RHSA-2020:4076)Moderate: and nspr security, bug fix, and enhancement update nss-util-debuginfo-3.53.1-1.el7_9.x86_64.rpmLinux
Out-of-bounds Read Vulnerability (CVE-2020-12403)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234