CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25648

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.4%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2020-25648

Mozilla » Network Security Services » Version: N/A

cpe:2.3:a:mozilla:network_security_services:-
Mozilla » Network Security Services » Version: 3.1

cpe:2.3:a:mozilla:network_security_services:3.1
Mozilla » Network Security Services » Version: 3.1.1

cpe:2.3:a:mozilla:network_security_services:3.1.1
Mozilla » Network Security Services » Version: 3.10

cpe:2.3:a:mozilla:network_security_services:3.10
Mozilla » Network Security Services » Version: 3.10.1

cpe:2.3:a:mozilla:network_security_services:3.10.1
Mozilla » Network Security Services » Version: 3.10.2

cpe:2.3:a:mozilla:network_security_services:3.10.2
Mozilla » Network Security Services » Version: 3.11

cpe:2.3:a:mozilla:network_security_services:3.11
Mozilla » Network Security Services » Version: 3.11.1

cpe:2.3:a:mozilla:network_security_services:3.11.1
Mozilla » Network Security Services » Version: 3.11.10

cpe:2.3:a:mozilla:network_security_services:3.11.10
Mozilla » Network Security Services » Version: 3.11.2

cpe:2.3:a:mozilla:network_security_services:3.11.2
Mozilla » Network Security Services » Version: 3.11.3

cpe:2.3:a:mozilla:network_security_services:3.11.3
Mozilla » Network Security Services » Version: 3.11.4

cpe:2.3:a:mozilla:network_security_services:3.11.4
Mozilla » Network Security Services » Version: 3.11.5

cpe:2.3:a:mozilla:network_security_services:3.11.5
Mozilla » Network Security Services » Version: 3.11.6

cpe:2.3:a:mozilla:network_security_services:3.11.6
Mozilla » Network Security Services » Version: 3.11.7

cpe:2.3:a:mozilla:network_security_services:3.11.7
Mozilla » Network Security Services » Version: 3.11.8

cpe:2.3:a:mozilla:network_security_services:3.11.8
Mozilla » Network Security Services » Version: 3.11.9

cpe:2.3:a:mozilla:network_security_services:3.11.9
Mozilla » Network Security Services » Version: 3.12

cpe:2.3:a:mozilla:network_security_services:3.12
Mozilla » Network Security Services » Version: 3.12.1

cpe:2.3:a:mozilla:network_security_services:3.12.1
Mozilla » Network Security Services » Version: 3.12.10

cpe:2.3:a:mozilla:network_security_services:3.12.10
Mozilla » Network Security Services » Version: 3.12.11

cpe:2.3:a:mozilla:network_security_services:3.12.11
Mozilla » Network Security Services » Version: 3.12.2

cpe:2.3:a:mozilla:network_security_services:3.12.2
Mozilla » Network Security Services » Version: 3.12.3

cpe:2.3:a:mozilla:network_security_services:3.12.3
Mozilla » Network Security Services » Version: 3.12.3.1

cpe:2.3:a:mozilla:network_security_services:3.12.3.1
Mozilla » Network Security Services » Version: 3.12.3.2

cpe:2.3:a:mozilla:network_security_services:3.12.3.2
Mozilla » Network Security Services » Version: 3.12.4

cpe:2.3:a:mozilla:network_security_services:3.12.4
Mozilla » Network Security Services » Version: 3.12.5

cpe:2.3:a:mozilla:network_security_services:3.12.5
Mozilla » Network Security Services » Version: 3.12.6

cpe:2.3:a:mozilla:network_security_services:3.12.6
Mozilla » Network Security Services » Version: 3.12.7

cpe:2.3:a:mozilla:network_security_services:3.12.7
Mozilla » Network Security Services » Version: 3.12.8

cpe:2.3:a:mozilla:network_security_services:3.12.8
Mozilla » Network Security Services » Version: 3.12.9

cpe:2.3:a:mozilla:network_security_services:3.12.9
Mozilla » Network Security Services » Version: 3.14

cpe:2.3:a:mozilla:network_security_services:3.14
Mozilla » Network Security Services » Version: 3.14.1

cpe:2.3:a:mozilla:network_security_services:3.14.1
Mozilla » Network Security Services » Version: 3.14.2

cpe:2.3:a:mozilla:network_security_services:3.14.2
Mozilla » Network Security Services » Version: 3.14.3

cpe:2.3:a:mozilla:network_security_services:3.14.3
Mozilla » Network Security Services » Version: 3.14.4

cpe:2.3:a:mozilla:network_security_services:3.14.4
Mozilla » Network Security Services » Version: 3.14.5

cpe:2.3:a:mozilla:network_security_services:3.14.5
Mozilla » Network Security Services » Version: 3.15

cpe:2.3:a:mozilla:network_security_services:3.15
Mozilla » Network Security Services » Version: 3.15.1

cpe:2.3:a:mozilla:network_security_services:3.15.1
Mozilla » Network Security Services » Version: 3.15.2

cpe:2.3:a:mozilla:network_security_services:3.15.2
Mozilla » Network Security Services » Version: 3.15.3

cpe:2.3:a:mozilla:network_security_services:3.15.3
Mozilla » Network Security Services » Version: 3.15.3.1

cpe:2.3:a:mozilla:network_security_services:3.15.3.1
Mozilla » Network Security Services » Version: 3.15.4

cpe:2.3:a:mozilla:network_security_services:3.15.4
Mozilla » Network Security Services » Version: 3.15.5

cpe:2.3:a:mozilla:network_security_services:3.15.5
Mozilla » Network Security Services » Version: 3.16

cpe:2.3:a:mozilla:network_security_services:3.16
Mozilla » Network Security Services » Version: 3.16.1

cpe:2.3:a:mozilla:network_security_services:3.16.1
Mozilla » Network Security Services » Version: 3.16.2

cpe:2.3:a:mozilla:network_security_services:3.16.2
Mozilla » Network Security Services » Version: 3.16.2.1

cpe:2.3:a:mozilla:network_security_services:3.16.2.1
Mozilla » Network Security Services » Version: 3.16.2.2

cpe:2.3:a:mozilla:network_security_services:3.16.2.2
Mozilla » Network Security Services » Version: 3.16.2.3

cpe:2.3:a:mozilla:network_security_services:3.16.2.3
Mozilla » Network Security Services » Version: 3.16.3

cpe:2.3:a:mozilla:network_security_services:3.16.3
Mozilla » Network Security Services » Version: 3.16.4

cpe:2.3:a:mozilla:network_security_services:3.16.4
Mozilla » Network Security Services » Version: 3.16.5

cpe:2.3:a:mozilla:network_security_services:3.16.5
Mozilla » Network Security Services » Version: 3.16.6

cpe:2.3:a:mozilla:network_security_services:3.16.6
Mozilla » Network Security Services » Version: 3.17

cpe:2.3:a:mozilla:network_security_services:3.17
Mozilla » Network Security Services » Version: 3.17.1

cpe:2.3:a:mozilla:network_security_services:3.17.1
Mozilla » Network Security Services » Version: 3.17.2

cpe:2.3:a:mozilla:network_security_services:3.17.2
Mozilla » Network Security Services » Version: 3.17.3

cpe:2.3:a:mozilla:network_security_services:3.17.3
Mozilla » Network Security Services » Version: 3.17.4

cpe:2.3:a:mozilla:network_security_services:3.17.4
Mozilla » Network Security Services » Version: 3.18

cpe:2.3:a:mozilla:network_security_services:3.18
Mozilla » Network Security Services » Version: 3.18.1

cpe:2.3:a:mozilla:network_security_services:3.18.1
Mozilla » Network Security Services » Version: 3.19

cpe:2.3:a:mozilla:network_security_services:3.19
Mozilla » Network Security Services » Version: 3.19.1

cpe:2.3:a:mozilla:network_security_services:3.19.1
Mozilla » Network Security Services » Version: 3.19.2

cpe:2.3:a:mozilla:network_security_services:3.19.2
Mozilla » Network Security Services » Version: 3.19.2.0

cpe:2.3:a:mozilla:network_security_services:3.19.2.0
Mozilla » Network Security Services » Version: 3.19.3

cpe:2.3:a:mozilla:network_security_services:3.19.3
Mozilla » Network Security Services » Version: 3.2

cpe:2.3:a:mozilla:network_security_services:3.2
Mozilla » Network Security Services » Version: 3.2.1

cpe:2.3:a:mozilla:network_security_services:3.2.1
Mozilla » Network Security Services » Version: 3.20

cpe:2.3:a:mozilla:network_security_services:3.20
Mozilla » Network Security Services » Version: 3.20.0

cpe:2.3:a:mozilla:network_security_services:3.20.0
Mozilla » Network Security Services » Version: 3.20.1

cpe:2.3:a:mozilla:network_security_services:3.20.1
Mozilla » Network Security Services » Version: 3.21

cpe:2.3:a:mozilla:network_security_services:3.21
Mozilla » Network Security Services » Version: 3.21.1

cpe:2.3:a:mozilla:network_security_services:3.21.1
Mozilla » Network Security Services » Version: 3.21.2

cpe:2.3:a:mozilla:network_security_services:3.21.2
Mozilla » Network Security Services » Version: 3.21.3

cpe:2.3:a:mozilla:network_security_services:3.21.3
Mozilla » Network Security Services » Version: 3.21.4

cpe:2.3:a:mozilla:network_security_services:3.21.4
Mozilla » Network Security Services » Version: 3.22

cpe:2.3:a:mozilla:network_security_services:3.22
Mozilla » Network Security Services » Version: 3.22.1

cpe:2.3:a:mozilla:network_security_services:3.22.1
Mozilla » Network Security Services » Version: 3.22.2

cpe:2.3:a:mozilla:network_security_services:3.22.2
Mozilla » Network Security Services » Version: 3.23

cpe:2.3:a:mozilla:network_security_services:3.23
Mozilla » Network Security Services » Version: 3.24

cpe:2.3:a:mozilla:network_security_services:3.24
Mozilla » Network Security Services » Version: 3.25

cpe:2.3:a:mozilla:network_security_services:3.25
Mozilla » Network Security Services » Version: 3.25.0

cpe:2.3:a:mozilla:network_security_services:3.25.0
Mozilla » Network Security Services » Version: 3.25.1

cpe:2.3:a:mozilla:network_security_services:3.25.1
Mozilla » Network Security Services » Version: 3.26

cpe:2.3:a:mozilla:network_security_services:3.26
Mozilla » Network Security Services » Version: 3.26.0

cpe:2.3:a:mozilla:network_security_services:3.26.0
Mozilla » Network Security Services » Version: 3.26.2

cpe:2.3:a:mozilla:network_security_services:3.26.2
Mozilla » Network Security Services » Version: 3.27

cpe:2.3:a:mozilla:network_security_services:3.27
Mozilla » Network Security Services » Version: 3.27.0

cpe:2.3:a:mozilla:network_security_services:3.27.0
Mozilla » Network Security Services » Version: 3.27.1

cpe:2.3:a:mozilla:network_security_services:3.27.1
Mozilla » Network Security Services » Version: 3.27.2

cpe:2.3:a:mozilla:network_security_services:3.27.2
Mozilla » Network Security Services » Version: 3.28

cpe:2.3:a:mozilla:network_security_services:3.28
Mozilla » Network Security Services » Version: 3.28.0

cpe:2.3:a:mozilla:network_security_services:3.28.0
Mozilla » Network Security Services » Version: 3.28.1

cpe:2.3:a:mozilla:network_security_services:3.28.1
Mozilla » Network Security Services » Version: 3.28.2

cpe:2.3:a:mozilla:network_security_services:3.28.2
Mozilla » Network Security Services » Version: 3.28.3

cpe:2.3:a:mozilla:network_security_services:3.28.3
Mozilla » Network Security Services » Version: 3.28.4

cpe:2.3:a:mozilla:network_security_services:3.28.4
Mozilla » Network Security Services » Version: 3.28.5

cpe:2.3:a:mozilla:network_security_services:3.28.5
Mozilla » Network Security Services » Version: 3.29

cpe:2.3:a:mozilla:network_security_services:3.29
Mozilla » Network Security Services » Version: 3.29.1

cpe:2.3:a:mozilla:network_security_services:3.29.1
Mozilla » Network Security Services » Version: 3.29.2

cpe:2.3:a:mozilla:network_security_services:3.29.2
Mozilla » Network Security Services » Version: 3.29.3

cpe:2.3:a:mozilla:network_security_services:3.29.3
Mozilla » Network Security Services » Version: 3.29.5

cpe:2.3:a:mozilla:network_security_services:3.29.5
Mozilla » Network Security Services » Version: 3.3

cpe:2.3:a:mozilla:network_security_services:3.3
Mozilla » Network Security Services » Version: 3.3.1

cpe:2.3:a:mozilla:network_security_services:3.3.1
Mozilla » Network Security Services » Version: 3.3.2

cpe:2.3:a:mozilla:network_security_services:3.3.2
Mozilla » Network Security Services » Version: 3.30

cpe:2.3:a:mozilla:network_security_services:3.30
Mozilla » Network Security Services » Version: 3.30.1

cpe:2.3:a:mozilla:network_security_services:3.30.1
Mozilla » Network Security Services » Version: 3.30.2

cpe:2.3:a:mozilla:network_security_services:3.30.2
Mozilla » Network Security Services » Version: 3.31

cpe:2.3:a:mozilla:network_security_services:3.31
Mozilla » Network Security Services » Version: 3.31.1

cpe:2.3:a:mozilla:network_security_services:3.31.1
Mozilla » Network Security Services » Version: 3.32

cpe:2.3:a:mozilla:network_security_services:3.32
Mozilla » Network Security Services » Version: 3.33

cpe:2.3:a:mozilla:network_security_services:3.33
Mozilla » Network Security Services » Version: 3.34

cpe:2.3:a:mozilla:network_security_services:3.34
Mozilla » Network Security Services » Version: 3.34.1

cpe:2.3:a:mozilla:network_security_services:3.34.1
Mozilla » Network Security Services » Version: 3.35

cpe:2.3:a:mozilla:network_security_services:3.35
Mozilla » Network Security Services » Version: 3.36

cpe:2.3:a:mozilla:network_security_services:3.36
Mozilla » Network Security Services » Version: 3.36.1

cpe:2.3:a:mozilla:network_security_services:3.36.1
Mozilla » Network Security Services » Version: 3.36.2

cpe:2.3:a:mozilla:network_security_services:3.36.2
Mozilla » Network Security Services » Version: 3.36.4

cpe:2.3:a:mozilla:network_security_services:3.36.4
Mozilla » Network Security Services » Version: 3.36.7

cpe:2.3:a:mozilla:network_security_services:3.36.7
Mozilla » Network Security Services » Version: 3.37

cpe:2.3:a:mozilla:network_security_services:3.37
Mozilla » Network Security Services » Version: 3.37.1

cpe:2.3:a:mozilla:network_security_services:3.37.1
Mozilla » Network Security Services » Version: 3.37.3

cpe:2.3:a:mozilla:network_security_services:3.37.3
Mozilla » Network Security Services » Version: 3.38

cpe:2.3:a:mozilla:network_security_services:3.38
Mozilla » Network Security Services » Version: 3.39

cpe:2.3:a:mozilla:network_security_services:3.39
Mozilla » Network Security Services » Version: 3.4

cpe:2.3:a:mozilla:network_security_services:3.4
Mozilla » Network Security Services » Version: 3.4.1

cpe:2.3:a:mozilla:network_security_services:3.4.1
Mozilla » Network Security Services » Version: 3.4.2

cpe:2.3:a:mozilla:network_security_services:3.4.2
Mozilla » Network Security Services » Version: 3.4.3

cpe:2.3:a:mozilla:network_security_services:3.4.3
Mozilla » Network Security Services » Version: 3.40

cpe:2.3:a:mozilla:network_security_services:3.40
Mozilla » Network Security Services » Version: 3.40.1

cpe:2.3:a:mozilla:network_security_services:3.40.1
Mozilla » Network Security Services » Version: 3.41

cpe:2.3:a:mozilla:network_security_services:3.41
Mozilla » Network Security Services » Version: 3.41.1

cpe:2.3:a:mozilla:network_security_services:3.41.1
Mozilla » Network Security Services » Version: 3.42

cpe:2.3:a:mozilla:network_security_services:3.42
Mozilla » Network Security Services » Version: 3.42.1

cpe:2.3:a:mozilla:network_security_services:3.42.1
Mozilla » Network Security Services » Version: 3.43

cpe:2.3:a:mozilla:network_security_services:3.43
Mozilla » Network Security Services » Version: 3.44

cpe:2.3:a:mozilla:network_security_services:3.44
Mozilla » Network Security Services » Version: 3.44.1

cpe:2.3:a:mozilla:network_security_services:3.44.1
Mozilla » Network Security Services » Version: 3.44.2

cpe:2.3:a:mozilla:network_security_services:3.44.2
Mozilla » Network Security Services » Version: 3.44.3

cpe:2.3:a:mozilla:network_security_services:3.44.3
Mozilla » Network Security Services » Version: 3.45

cpe:2.3:a:mozilla:network_security_services:3.45
Mozilla » Network Security Services » Version: 3.46

cpe:2.3:a:mozilla:network_security_services:3.46
Mozilla » Network Security Services » Version: 3.46.1

cpe:2.3:a:mozilla:network_security_services:3.46.1
Mozilla » Network Security Services » Version: 3.47

cpe:2.3:a:mozilla:network_security_services:3.47
Mozilla » Network Security Services » Version: 3.47.1

cpe:2.3:a:mozilla:network_security_services:3.47.1
Mozilla » Network Security Services » Version: 3.48

cpe:2.3:a:mozilla:network_security_services:3.48
Mozilla » Network Security Services » Version: 3.48.1

cpe:2.3:a:mozilla:network_security_services:3.48.1
Mozilla » Network Security Services » Version: 3.49

cpe:2.3:a:mozilla:network_security_services:3.49
Mozilla » Network Security Services » Version: 3.49.1

cpe:2.3:a:mozilla:network_security_services:3.49.1
Mozilla » Network Security Services » Version: 3.49.2

cpe:2.3:a:mozilla:network_security_services:3.49.2
Mozilla » Network Security Services » Version: 3.5

cpe:2.3:a:mozilla:network_security_services:3.5
Mozilla » Network Security Services » Version: 3.51

cpe:2.3:a:mozilla:network_security_services:3.51
Mozilla » Network Security Services » Version: 3.51.1

cpe:2.3:a:mozilla:network_security_services:3.51.1
Mozilla » Network Security Services » Version: 3.52

cpe:2.3:a:mozilla:network_security_services:3.52
Mozilla » Network Security Services » Version: 3.52.1

cpe:2.3:a:mozilla:network_security_services:3.52.1
Mozilla » Network Security Services » Version: 3.53

cpe:2.3:a:mozilla:network_security_services:3.53
Mozilla » Network Security Services » Version: 3.53.1

cpe:2.3:a:mozilla:network_security_services:3.53.1
Mozilla » Network Security Services » Version: 3.54

cpe:2.3:a:mozilla:network_security_services:3.54
Mozilla » Network Security Services » Version: 3.55

cpe:2.3:a:mozilla:network_security_services:3.55
Mozilla » Network Security Services » Version: 3.56

cpe:2.3:a:mozilla:network_security_services:3.56
Mozilla » Network Security Services » Version: 3.57

cpe:2.3:a:mozilla:network_security_services:3.57
Mozilla » Network Security Services » Version: 3.6

cpe:2.3:a:mozilla:network_security_services:3.6
Mozilla » Network Security Services » Version: 3.6.1

cpe:2.3:a:mozilla:network_security_services:3.6.1
Mozilla » Network Security Services » Version: 3.7

cpe:2.3:a:mozilla:network_security_services:3.7
Mozilla » Network Security Services » Version: 3.7.1

cpe:2.3:a:mozilla:network_security_services:3.7.1
Mozilla » Network Security Services » Version: 3.7.2

cpe:2.3:a:mozilla:network_security_services:3.7.2
Mozilla » Network Security Services » Version: 3.7.3

cpe:2.3:a:mozilla:network_security_services:3.7.3
Mozilla » Network Security Services » Version: 3.7.5

cpe:2.3:a:mozilla:network_security_services:3.7.5
Mozilla » Network Security Services » Version: 3.7.7

cpe:2.3:a:mozilla:network_security_services:3.7.7
Mozilla » Network Security Services » Version: 3.8

cpe:2.3:a:mozilla:network_security_services:3.8
Mozilla » Network Security Services » Version: 3.9

cpe:2.3:a:mozilla:network_security_services:3.9
Mozilla » Network Security Services » Version: 3.9.1

cpe:2.3:a:mozilla:network_security_services:3.9.1
Mozilla » Network Security Services » Version: 3.9.2

cpe:2.3:a:mozilla:network_security_services:3.9.2
Mozilla » Network Security Services » Version: 3.9.3

cpe:2.3:a:mozilla:network_security_services:3.9.3
Mozilla » Network Security Services » Version: 3.9.4

cpe:2.3:a:mozilla:network_security_services:3.9.4
Mozilla » Network Security Services » Version: 3.9.5

cpe:2.3:a:mozilla:network_security_services:3.9.5
Oracle » Communications Offline Mediation Controller » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0
Oracle » Communications Pricing Design Center » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0
Oracle » Jd Edwards Enterpriseone Tools » Version: N/A

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:-
Oracle » Jd Edwards Enterpriseone Tools » Version: 4.0.1.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:4.0.1.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.1

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.1.5

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1.5
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.0.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.0.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.4.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.4.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.4.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.4.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.5.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.5.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.5.3

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.5.3
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25648

Products

Pricing

Contact Us