mozilla-nss (SUSE:Manager Server 4.2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Server 4.2 package mozilla-nss, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2023-0767 — CVSS 8.8 (high): An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag…
• CVE-2022-3479 — CVSS 7.5 (high): A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can…
• CVE-2022-23491 — CVSS 6.8 (medium): Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of…