nss-sysinit vulnerabilities

Known vulnerabilities in the nss-sysinit package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Cleartext Transmission of Sensitive Information	*
M Out-of-Bounds	*
M Information Exposure	*
M Information Exposure	*
H Out-of-Bounds	<0:3.79.0-5.el7_9
C Buffer Overflow	<0:3.67.0-4.el7_9
M PRNG Seed Error	<0:3.36.0-7.el7_5
H Use After Free	<0:3.28.4-12.el7_4
H NULL Pointer Dereference	<0:3.28.4-1.2.el7_3
C Out-of-bounds Write	<0:3.28.4-1.0.el7_3
M Use of a Broken or Risky Cryptographic Algorithm	*
M CVE-2016-2834	<0:3.21.3-2.el7_3
M Key Management Errors	<0:3.21.3-2.el7_3
M NULL Pointer Dereference	<0:3.21.3-2.el7_3
M CVE-2016-1979	<0:3.21.0-9.el7_2
M CVE-2016-1978	<0:3.21.0-9.el7_2
M Improper Data Handling	<0:3.19.1-19.el7_2
C Integer Overflow or Wraparound	<0:3.19.1-7.el7_1.2
C Heap-based Buffer Overflow	<0:3.19.1-7.el7_1.2
C Out-of-Bounds	<0:3.19.1-7.el7_1.2
M Improperly Implemented Security Check for Standard	<0:3.19.1-3.el7_1
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.19.1-3.el7_1
M Use of a Broken or Risky Cryptographic Algorithm	*
H Not Failing Securely ('Failing Open')	*
H Improper Verification of Cryptographic Signature	<0:3.16.2-7.el7_0
L Encoding Error	<0:3.16.2-2.el7_0
C Use After Free	<0:3.15.4-7.el7_0
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
L CVE-2014-1569	<0:3.18.0-2.2.el7_1
H Out-of-bounds Write	<0:3.44.0-7.el7_7
M Out-of-bounds Write	<0:3.16.2.3-5.el7
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
M Out-of-bounds Read	<0:3.53.1-3.el7_9
M Heap-based Buffer Overflow	<0:3.53.1-3.el7_9
M Improper Authentication	<0:3.53.1-3.el7_9
M Use After Free	<0:3.53.1-3.el7_9
M Information Exposure	<0:3.44.0-4.el7
M Out-of-bounds Read	<0:3.53.1-3.el7_9
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
M NULL Pointer Dereference	*
H Buffer Overflow	<0:3.44.0-7.el7_7
M NULL Pointer Dereference	<0:3.44.0-4.el7
M Missing Required Cryptographic Step	*
M Covert Timing Channel	*
M Allocation of Resources Without Limits or Throttling	<0:3.53.1-7.el7_9
L Covert Timing Channel	*
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.53.1-3.el7_9
M Information Exposure	<0:3.44.0-4.el7

Vulnerability

Vulnerable Version

Cleartext Transmission of Sensitive Information