CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12404

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.197

EPSS Ranking 95.2%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2018-12404

Mozilla » Network Security Services » Version: N/A

cpe:2.3:a:mozilla:network_security_services:-
Mozilla » Network Security Services » Version: 3.1

cpe:2.3:a:mozilla:network_security_services:3.1
Mozilla » Network Security Services » Version: 3.1.1

cpe:2.3:a:mozilla:network_security_services:3.1.1
Mozilla » Network Security Services » Version: 3.10

cpe:2.3:a:mozilla:network_security_services:3.10
Mozilla » Network Security Services » Version: 3.10.1

cpe:2.3:a:mozilla:network_security_services:3.10.1
Mozilla » Network Security Services » Version: 3.10.2

cpe:2.3:a:mozilla:network_security_services:3.10.2
Mozilla » Network Security Services » Version: 3.11

cpe:2.3:a:mozilla:network_security_services:3.11
Mozilla » Network Security Services » Version: 3.11.1

cpe:2.3:a:mozilla:network_security_services:3.11.1
Mozilla » Network Security Services » Version: 3.11.10

cpe:2.3:a:mozilla:network_security_services:3.11.10
Mozilla » Network Security Services » Version: 3.11.2

cpe:2.3:a:mozilla:network_security_services:3.11.2
Mozilla » Network Security Services » Version: 3.11.3

cpe:2.3:a:mozilla:network_security_services:3.11.3
Mozilla » Network Security Services » Version: 3.11.4

cpe:2.3:a:mozilla:network_security_services:3.11.4
Mozilla » Network Security Services » Version: 3.11.5

cpe:2.3:a:mozilla:network_security_services:3.11.5
Mozilla » Network Security Services » Version: 3.11.6

cpe:2.3:a:mozilla:network_security_services:3.11.6
Mozilla » Network Security Services » Version: 3.11.7

cpe:2.3:a:mozilla:network_security_services:3.11.7
Mozilla » Network Security Services » Version: 3.11.8

cpe:2.3:a:mozilla:network_security_services:3.11.8
Mozilla » Network Security Services » Version: 3.11.9

cpe:2.3:a:mozilla:network_security_services:3.11.9
Mozilla » Network Security Services » Version: 3.12

cpe:2.3:a:mozilla:network_security_services:3.12
Mozilla » Network Security Services » Version: 3.12.1

cpe:2.3:a:mozilla:network_security_services:3.12.1
Mozilla » Network Security Services » Version: 3.12.10

cpe:2.3:a:mozilla:network_security_services:3.12.10
Mozilla » Network Security Services » Version: 3.12.11

cpe:2.3:a:mozilla:network_security_services:3.12.11
Mozilla » Network Security Services » Version: 3.12.2

cpe:2.3:a:mozilla:network_security_services:3.12.2
Mozilla » Network Security Services » Version: 3.12.3

cpe:2.3:a:mozilla:network_security_services:3.12.3
Mozilla » Network Security Services » Version: 3.12.3.1

cpe:2.3:a:mozilla:network_security_services:3.12.3.1
Mozilla » Network Security Services » Version: 3.12.3.2

cpe:2.3:a:mozilla:network_security_services:3.12.3.2
Mozilla » Network Security Services » Version: 3.12.4

cpe:2.3:a:mozilla:network_security_services:3.12.4
Mozilla » Network Security Services » Version: 3.12.5

cpe:2.3:a:mozilla:network_security_services:3.12.5
Mozilla » Network Security Services » Version: 3.12.6

cpe:2.3:a:mozilla:network_security_services:3.12.6
Mozilla » Network Security Services » Version: 3.12.7

cpe:2.3:a:mozilla:network_security_services:3.12.7
Mozilla » Network Security Services » Version: 3.12.8

cpe:2.3:a:mozilla:network_security_services:3.12.8
Mozilla » Network Security Services » Version: 3.12.9

cpe:2.3:a:mozilla:network_security_services:3.12.9
Mozilla » Network Security Services » Version: 3.14

cpe:2.3:a:mozilla:network_security_services:3.14
Mozilla » Network Security Services » Version: 3.14.1

cpe:2.3:a:mozilla:network_security_services:3.14.1
Mozilla » Network Security Services » Version: 3.14.2

cpe:2.3:a:mozilla:network_security_services:3.14.2
Mozilla » Network Security Services » Version: 3.14.3

cpe:2.3:a:mozilla:network_security_services:3.14.3
Mozilla » Network Security Services » Version: 3.14.4

cpe:2.3:a:mozilla:network_security_services:3.14.4
Mozilla » Network Security Services » Version: 3.14.5

cpe:2.3:a:mozilla:network_security_services:3.14.5
Mozilla » Network Security Services » Version: 3.15

cpe:2.3:a:mozilla:network_security_services:3.15
Mozilla » Network Security Services » Version: 3.15.1

cpe:2.3:a:mozilla:network_security_services:3.15.1
Mozilla » Network Security Services » Version: 3.15.2

cpe:2.3:a:mozilla:network_security_services:3.15.2
Mozilla » Network Security Services » Version: 3.15.3

cpe:2.3:a:mozilla:network_security_services:3.15.3
Mozilla » Network Security Services » Version: 3.15.3.1

cpe:2.3:a:mozilla:network_security_services:3.15.3.1
Mozilla » Network Security Services » Version: 3.15.4

cpe:2.3:a:mozilla:network_security_services:3.15.4
Mozilla » Network Security Services » Version: 3.15.5

cpe:2.3:a:mozilla:network_security_services:3.15.5
Mozilla » Network Security Services » Version: 3.16

cpe:2.3:a:mozilla:network_security_services:3.16
Mozilla » Network Security Services » Version: 3.16.1

cpe:2.3:a:mozilla:network_security_services:3.16.1
Mozilla » Network Security Services » Version: 3.16.2

cpe:2.3:a:mozilla:network_security_services:3.16.2
Mozilla » Network Security Services » Version: 3.16.2.1

cpe:2.3:a:mozilla:network_security_services:3.16.2.1
Mozilla » Network Security Services » Version: 3.16.2.2

cpe:2.3:a:mozilla:network_security_services:3.16.2.2
Mozilla » Network Security Services » Version: 3.16.2.3

cpe:2.3:a:mozilla:network_security_services:3.16.2.3
Mozilla » Network Security Services » Version: 3.16.3

cpe:2.3:a:mozilla:network_security_services:3.16.3
Mozilla » Network Security Services » Version: 3.16.4

cpe:2.3:a:mozilla:network_security_services:3.16.4
Mozilla » Network Security Services » Version: 3.16.5

cpe:2.3:a:mozilla:network_security_services:3.16.5
Mozilla » Network Security Services » Version: 3.16.6

cpe:2.3:a:mozilla:network_security_services:3.16.6
Mozilla » Network Security Services » Version: 3.17

cpe:2.3:a:mozilla:network_security_services:3.17
Mozilla » Network Security Services » Version: 3.17.1

cpe:2.3:a:mozilla:network_security_services:3.17.1
Mozilla » Network Security Services » Version: 3.17.2

cpe:2.3:a:mozilla:network_security_services:3.17.2
Mozilla » Network Security Services » Version: 3.17.3

cpe:2.3:a:mozilla:network_security_services:3.17.3
Mozilla » Network Security Services » Version: 3.17.4

cpe:2.3:a:mozilla:network_security_services:3.17.4
Mozilla » Network Security Services » Version: 3.18

cpe:2.3:a:mozilla:network_security_services:3.18
Mozilla » Network Security Services » Version: 3.18.1

cpe:2.3:a:mozilla:network_security_services:3.18.1
Mozilla » Network Security Services » Version: 3.19

cpe:2.3:a:mozilla:network_security_services:3.19
Mozilla » Network Security Services » Version: 3.19.1

cpe:2.3:a:mozilla:network_security_services:3.19.1
Mozilla » Network Security Services » Version: 3.19.2

cpe:2.3:a:mozilla:network_security_services:3.19.2
Mozilla » Network Security Services » Version: 3.19.2.0

cpe:2.3:a:mozilla:network_security_services:3.19.2.0
Mozilla » Network Security Services » Version: 3.19.3

cpe:2.3:a:mozilla:network_security_services:3.19.3
Mozilla » Network Security Services » Version: 3.2

cpe:2.3:a:mozilla:network_security_services:3.2
Mozilla » Network Security Services » Version: 3.2.1

cpe:2.3:a:mozilla:network_security_services:3.2.1
Mozilla » Network Security Services » Version: 3.20

cpe:2.3:a:mozilla:network_security_services:3.20
Mozilla » Network Security Services » Version: 3.20.0

cpe:2.3:a:mozilla:network_security_services:3.20.0
Mozilla » Network Security Services » Version: 3.20.1

cpe:2.3:a:mozilla:network_security_services:3.20.1
Mozilla » Network Security Services » Version: 3.21

cpe:2.3:a:mozilla:network_security_services:3.21
Mozilla » Network Security Services » Version: 3.21.1

cpe:2.3:a:mozilla:network_security_services:3.21.1
Mozilla » Network Security Services » Version: 3.21.2

cpe:2.3:a:mozilla:network_security_services:3.21.2
Mozilla » Network Security Services » Version: 3.21.3

cpe:2.3:a:mozilla:network_security_services:3.21.3
Mozilla » Network Security Services » Version: 3.21.4

cpe:2.3:a:mozilla:network_security_services:3.21.4
Mozilla » Network Security Services » Version: 3.22

cpe:2.3:a:mozilla:network_security_services:3.22
Mozilla » Network Security Services » Version: 3.22.1

cpe:2.3:a:mozilla:network_security_services:3.22.1
Mozilla » Network Security Services » Version: 3.22.2

cpe:2.3:a:mozilla:network_security_services:3.22.2
Mozilla » Network Security Services » Version: 3.23

cpe:2.3:a:mozilla:network_security_services:3.23
Mozilla » Network Security Services » Version: 3.24

cpe:2.3:a:mozilla:network_security_services:3.24
Mozilla » Network Security Services » Version: 3.25

cpe:2.3:a:mozilla:network_security_services:3.25
Mozilla » Network Security Services » Version: 3.25.0

cpe:2.3:a:mozilla:network_security_services:3.25.0
Mozilla » Network Security Services » Version: 3.25.1

cpe:2.3:a:mozilla:network_security_services:3.25.1
Mozilla » Network Security Services » Version: 3.26

cpe:2.3:a:mozilla:network_security_services:3.26
Mozilla » Network Security Services » Version: 3.26.0

cpe:2.3:a:mozilla:network_security_services:3.26.0
Mozilla » Network Security Services » Version: 3.26.2

cpe:2.3:a:mozilla:network_security_services:3.26.2
Mozilla » Network Security Services » Version: 3.27

cpe:2.3:a:mozilla:network_security_services:3.27
Mozilla » Network Security Services » Version: 3.27.0

cpe:2.3:a:mozilla:network_security_services:3.27.0
Mozilla » Network Security Services » Version: 3.27.1

cpe:2.3:a:mozilla:network_security_services:3.27.1
Mozilla » Network Security Services » Version: 3.27.2

cpe:2.3:a:mozilla:network_security_services:3.27.2
Mozilla » Network Security Services » Version: 3.28

cpe:2.3:a:mozilla:network_security_services:3.28
Mozilla » Network Security Services » Version: 3.28.0

cpe:2.3:a:mozilla:network_security_services:3.28.0
Mozilla » Network Security Services » Version: 3.28.1

cpe:2.3:a:mozilla:network_security_services:3.28.1
Mozilla » Network Security Services » Version: 3.28.2

cpe:2.3:a:mozilla:network_security_services:3.28.2
Mozilla » Network Security Services » Version: 3.28.3

cpe:2.3:a:mozilla:network_security_services:3.28.3
Mozilla » Network Security Services » Version: 3.28.4

cpe:2.3:a:mozilla:network_security_services:3.28.4
Mozilla » Network Security Services » Version: 3.28.5

cpe:2.3:a:mozilla:network_security_services:3.28.5
Mozilla » Network Security Services » Version: 3.29

cpe:2.3:a:mozilla:network_security_services:3.29
Mozilla » Network Security Services » Version: 3.29.1

cpe:2.3:a:mozilla:network_security_services:3.29.1
Mozilla » Network Security Services » Version: 3.29.2

cpe:2.3:a:mozilla:network_security_services:3.29.2
Mozilla » Network Security Services » Version: 3.29.3

cpe:2.3:a:mozilla:network_security_services:3.29.3
Mozilla » Network Security Services » Version: 3.29.5

cpe:2.3:a:mozilla:network_security_services:3.29.5
Mozilla » Network Security Services » Version: 3.3

cpe:2.3:a:mozilla:network_security_services:3.3
Mozilla » Network Security Services » Version: 3.3.1

cpe:2.3:a:mozilla:network_security_services:3.3.1
Mozilla » Network Security Services » Version: 3.3.2

cpe:2.3:a:mozilla:network_security_services:3.3.2
Mozilla » Network Security Services » Version: 3.30

cpe:2.3:a:mozilla:network_security_services:3.30
Mozilla » Network Security Services » Version: 3.30.1

cpe:2.3:a:mozilla:network_security_services:3.30.1
Mozilla » Network Security Services » Version: 3.30.2

cpe:2.3:a:mozilla:network_security_services:3.30.2
Mozilla » Network Security Services » Version: 3.31

cpe:2.3:a:mozilla:network_security_services:3.31
Mozilla » Network Security Services » Version: 3.31.1

cpe:2.3:a:mozilla:network_security_services:3.31.1
Mozilla » Network Security Services » Version: 3.32

cpe:2.3:a:mozilla:network_security_services:3.32
Mozilla » Network Security Services » Version: 3.33

cpe:2.3:a:mozilla:network_security_services:3.33
Mozilla » Network Security Services » Version: 3.34

cpe:2.3:a:mozilla:network_security_services:3.34
Mozilla » Network Security Services » Version: 3.34.1

cpe:2.3:a:mozilla:network_security_services:3.34.1
Mozilla » Network Security Services » Version: 3.35

cpe:2.3:a:mozilla:network_security_services:3.35
Mozilla » Network Security Services » Version: 3.36

cpe:2.3:a:mozilla:network_security_services:3.36
Mozilla » Network Security Services » Version: 3.36.1

cpe:2.3:a:mozilla:network_security_services:3.36.1
Mozilla » Network Security Services » Version: 3.36.2

cpe:2.3:a:mozilla:network_security_services:3.36.2
Mozilla » Network Security Services » Version: 3.36.4

cpe:2.3:a:mozilla:network_security_services:3.36.4
Mozilla » Network Security Services » Version: 3.36.7

cpe:2.3:a:mozilla:network_security_services:3.36.7
Mozilla » Network Security Services » Version: 3.37

cpe:2.3:a:mozilla:network_security_services:3.37
Mozilla » Network Security Services » Version: 3.37.1

cpe:2.3:a:mozilla:network_security_services:3.37.1
Mozilla » Network Security Services » Version: 3.37.3

cpe:2.3:a:mozilla:network_security_services:3.37.3
Mozilla » Network Security Services » Version: 3.38

cpe:2.3:a:mozilla:network_security_services:3.38
Mozilla » Network Security Services » Version: 3.39

cpe:2.3:a:mozilla:network_security_services:3.39
Mozilla » Network Security Services » Version: 3.4

cpe:2.3:a:mozilla:network_security_services:3.4
Mozilla » Network Security Services » Version: 3.4.1

cpe:2.3:a:mozilla:network_security_services:3.4.1
Mozilla » Network Security Services » Version: 3.4.2

cpe:2.3:a:mozilla:network_security_services:3.4.2
Mozilla » Network Security Services » Version: 3.4.3

cpe:2.3:a:mozilla:network_security_services:3.4.3
Mozilla » Network Security Services » Version: 3.40

cpe:2.3:a:mozilla:network_security_services:3.40
Mozilla » Network Security Services » Version: 3.40.1

cpe:2.3:a:mozilla:network_security_services:3.40.1
Mozilla » Network Security Services » Version: 3.5

cpe:2.3:a:mozilla:network_security_services:3.5
Mozilla » Network Security Services » Version: 3.6

cpe:2.3:a:mozilla:network_security_services:3.6
Mozilla » Network Security Services » Version: 3.6.1

cpe:2.3:a:mozilla:network_security_services:3.6.1
Mozilla » Network Security Services » Version: 3.7

cpe:2.3:a:mozilla:network_security_services:3.7
Mozilla » Network Security Services » Version: 3.7.1

cpe:2.3:a:mozilla:network_security_services:3.7.1
Mozilla » Network Security Services » Version: 3.7.2

cpe:2.3:a:mozilla:network_security_services:3.7.2
Mozilla » Network Security Services » Version: 3.7.3

cpe:2.3:a:mozilla:network_security_services:3.7.3
Mozilla » Network Security Services » Version: 3.7.5

cpe:2.3:a:mozilla:network_security_services:3.7.5
Mozilla » Network Security Services » Version: 3.7.7

cpe:2.3:a:mozilla:network_security_services:3.7.7
Mozilla » Network Security Services » Version: 3.8

cpe:2.3:a:mozilla:network_security_services:3.8
Mozilla » Network Security Services » Version: 3.9

cpe:2.3:a:mozilla:network_security_services:3.9
Mozilla » Network Security Services » Version: 3.9.1

cpe:2.3:a:mozilla:network_security_services:3.9.1
Mozilla » Network Security Services » Version: 3.9.2

cpe:2.3:a:mozilla:network_security_services:3.9.2
Mozilla » Network Security Services » Version: 3.9.3

cpe:2.3:a:mozilla:network_security_services:3.9.3
Mozilla » Network Security Services » Version: 3.9.4

cpe:2.3:a:mozilla:network_security_services:3.9.4
Mozilla » Network Security Services » Version: 3.9.5

cpe:2.3:a:mozilla:network_security_services:3.9.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12404

Products

Pricing

Contact Us