Medium severity · published Aug 1, 2018
CVE-2016-8635
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack
5.9
CVSS
2%
EPSS
No
On KEV
Description
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
nss · Mozilla
3.21.x · source: vendor
EL
Enterprise Linux Desktop · Redhat
5.0; 6.0; 7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
5.0; 6.0; 7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.3; 7.4; 7.6 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.3; 7.4; 7.5; 7.6 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
7.3; 7.6 · source: NVD
EL
Enterprise Linux Workstation · Redhat
5.0; 6.0; 7.0 · source: NVD
NS
Network Security Services · Mozilla
3.21 through 3.21.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-8635
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-8635
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2779.html
Third Party Advisory
http://www.securityfocus.com/bid/94346
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8635
Third Party Advisory
https://security.gentoo.org/glsa/201701-46
More from nss
9.8
CVE-2021-43527
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures
9.8
CVE-2009-3555
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and…
9.1
CVE-2020-12403
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55
7.5
CVE-2016-5285
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which…
6.5
CVE-2023-4421
The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks