mozilla-nss (SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS package mozilla-nss, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2022-31741 — CVSS 8.8 (high): A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption…
• CVE-2023-0767 — CVSS 8.8 (high): An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag…
• CVE-2022-3479 — CVSS 7.5 (high): A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can…
• CVE-2022-23491 — CVSS 6.8 (medium): Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of…
• CVE-2022-1097 — CVSS 6.5 (medium): <code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads…
• CVE-2023-5388 — CVSS 6.5 (medium): NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to…