NS-SA-2022-0030
2022-05-08 20:17:09
简介
moderate: nss/hivex security update
严重级别
moderate
主题
An update for nss/hivex is now available for NewStart CGSL MAIN 5.05/CGSL CORE 5.05.
NewStart Security has rated this update as having a security impact of moderate. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.
详细描述
nss: Library files for developing PKCS #11 modules using basic NSS low level services.
hivex: ocaml-hivex-devel contains development libraries required to use the OCaml bindings for hivex.
Security Fix(es):
nss: A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability.(CVE-2020-25648)
nss: bugfix
hivex: A flaw was found in the hivex library. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.(CVE-2021-3504)
hivex: bugfix
Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 5.05.F13B5.
影响组件
影响产品
- CGSL MAIN 5.05
- CGSL CORE 5.05
更新包
{"fix":[{"product":"CGSL MAIN 5.05","pkgs":[{"binary":["nss-devel-3.53.1-7.el7_9.cgslv5_5.0.1.gab7806b.x86_64.rpm","nss-sysinit-3.53.1-7.el7_9.cgslv5_5.0.1.gab7806b.x86_64.rpm","nss-tools-3.53.1-7.el7_9.cgslv5_5.0.1.gab7806b.x86_64.rpm","nss-pkcs11-devel-3.53.1-7.el7_9.cgslv5_5.0.1.gab7806b.x86_64.rpm","nss-3.53.1-7.el7_9.cgslv5_5.0.1.gab7806b.x86_64.rpm","nss-debuginfo-3.53.1-7.el7_9.cgslv5_5.0.1.gab7806b.x86_64.rpm"],"source":"nss-3.53.1-7.el7_9.cgslv5_5.0.1.gab7806b.src.rpm"},{"binary":["hivex-1.3.10-6.11.el7_9.x86_64.rpm","hivex-debuginfo-1.3.10-6.11.el7_9.x86_64.rpm","ruby-hivex-1.3.10-6.11.el7_9.x86_64.rpm","perl-hivex-1.3.10-6.11.el7_9.x86_64.rpm","python-hivex-1.3.10-6.11.el7_9.x86_64.rpm","hivex-devel-1.3.10-6.11.el7_9.x86_64.rpm","ocaml-hivex-devel-1.3.10-6.11.el7_9.x86_64.rpm","ocaml-hivex-1.3.10-6.11.el7_9.x86_64.rpm"],"source":"hivex-1.3.10-6.11.el7_9.src.rpm"}]},{"product":"CGSL CORE 5.05","pkgs":[{"binary":["nss-3.53.1-7.el7_9.cgslv5_5.0.2.g5cba0ff.lite.x86_64.rpm","nss-tools-3.53.1-7.el7_9.cgslv5_5.0.2.g5cba0ff.lite.x86_64.rpm","nss-debuginfo-3.53.1-7.el7_9.cgslv5_5.0.2.g5cba0ff.lite.x86_64.rpm","nss-pkcs11-devel-3.53.1-7.el7_9.cgslv5_5.0.2.g5cba0ff.lite.x86_64.rpm","nss-sysinit-3.53.1-7.el7_9.cgslv5_5.0.2.g5cba0ff.lite.x86_64.rpm","nss-devel-3.53.1-7.el7_9.cgslv5_5.0.2.g5cba0ff.lite.x86_64.rpm"],"source":"nss-3.53.1-7.el7_9.cgslv5_5.0.2.g5cba0ff.lite.src.rpm"},{"binary":["hivex-1.3.10-6.11.el7_9.x86_64.rpm","hivex-debuginfo-1.3.10-6.11.el7_9.x86_64.rpm","ruby-hivex-1.3.10-6.11.el7_9.x86_64.rpm","perl-hivex-1.3.10-6.11.el7_9.x86_64.rpm","python-hivex-1.3.10-6.11.el7_9.x86_64.rpm","hivex-devel-1.3.10-6.11.el7_9.x86_64.rpm","ocaml-hivex-devel-1.3.10-6.11.el7_9.x86_64.rpm","ocaml-hivex-1.3.10-6.11.el7_9.x86_64.rpm"],"source":"hivex-1.3.10-6.11.el7_9.src.rpm"}]}]}
CVE
参考