nss-tools vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the nss-tools package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Information Exposure	*
M Information Exposure	*
H Out-of-Bounds	<0:3.79.0-5.el7_9
C Buffer Overflow	<0:3.67.0-4.el7_9
M PRNG Seed Error	<0:3.36.0-7.el7_5
H Use After Free	<0:3.28.4-12.el7_4
H NULL Pointer Dereference	<0:3.28.4-1.2.el7_3
C Out-of-bounds Write	<0:3.28.4-1.0.el7_3
M Use of a Broken or Risky Cryptographic Algorithm	*
M CVE-2016-2834	<0:3.21.3-2.el7_3
M Key Management Errors	<0:3.21.3-2.el7_3
M NULL Pointer Dereference	<0:3.21.3-2.el7_3
M CVE-2016-1979	<0:3.21.0-9.el7_2
M CVE-2016-1978	<0:3.21.0-9.el7_2
M Improper Data Handling	<0:3.19.1-19.el7_2
C Integer Overflow or Wraparound	<0:3.19.1-7.el7_1.2
C Heap-based Buffer Overflow	<0:3.19.1-7.el7_1.2
C Out-of-Bounds	<0:3.19.1-7.el7_1.2
M Improperly Implemented Security Check for Standard	<0:3.19.1-3.el7_1
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.19.1-3.el7_1
M Use of a Broken or Risky Cryptographic Algorithm	*
H Not Failing Securely ('Failing Open')	*
H Improper Verification of Cryptographic Signature	<0:3.16.2-7.el7_0
L Encoding Error	<0:3.16.2-2.el7_0
C Use After Free	<0:3.15.4-7.el7_0
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
L CVE-2014-1569	<0:3.18.0-2.2.el7_1
H Out-of-bounds Write	<0:3.44.0-7.el7_7
M Out-of-bounds Write	<0:3.16.2.3-5.el7
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
M Out-of-bounds Read	<0:3.53.1-3.el7_9
M Heap-based Buffer Overflow	<0:3.53.1-3.el7_9
M Improper Authentication	<0:3.53.1-3.el7_9
M Use After Free	<0:3.53.1-3.el7_9
M Information Exposure	<0:3.44.0-4.el7
M Out-of-bounds Read	<0:3.53.1-3.el7_9
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
M NULL Pointer Dereference	*
H Buffer Overflow	<0:3.44.0-7.el7_7
M NULL Pointer Dereference	<0:3.44.0-4.el7
M Missing Required Cryptographic Step	*
M Covert Timing Channel	*
M Allocation of Resources Without Limits or Throttling	<0:3.53.1-7.el7_9
L Covert Timing Channel	*
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
M Information Exposure	<0:3.44.0-4.el7