Known vulnerabilities in libnss3 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libnss3_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libnss3 (Ubuntu package) libnss3 (Ubuntu package) is affected by 14 known vulnerabilities: 1 high, 7 medium, 6 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85267 - Covert Timing Channel
CVE-2023-5388
CWE-385 Medium
No
No
2:3.98-0ubuntu0.20.04.1, 2:3.98-0ubuntu0.20.04.2, 2:3.98-0ubuntu0.22.04.1, 2:3.98-0ubuntu0.22.04.2, 2:3.98-0ubuntu0.23.10.1 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU84568 - Observable discrepancy
CVE-2023-6135
CWE-203 Medium
No
No
2:3.98-0ubuntu0.20.04.1, 2:3.98-0ubuntu0.20.04.2, 2:3.98-0ubuntu0.22.04.1, 2:3.98-0ubuntu0.22.04.2, 2:3.98-0ubuntu0.23.10.1 19.12.2023 SB2023121946
SB2023122118
SB2024010201
and 33 more
#VU84108 - Covert Timing Channel
CVE-2023-4421
CWE-385 Medium
No
No
2:3.98-0ubuntu0.20.04.1, 2:3.98-0ubuntu0.20.04.2, 2:3.98-0ubuntu0.22.04.1, 2:3.98-0ubuntu0.22.04.2, 2:3.98-0ubuntu0.23.10.1 12.12.2023 SB2023121264
SB2023121268
SB2024011506
and 3 more
#VU72250 - Out-of-bounds write
CVE-2023-0767
CWE-787 Medium
No
No
Ubuntu Pro, 2:3.35-2ubuntu2.16, 2:3.49.1-1ubuntu1.9, 2:3.68.2-0ubuntu1.2, 2:3.82-1ubuntu0.1 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 84 more
#VU68967 - Stack-based buffer overflow
CVE-2022-3479
CWE-121 Medium
No
No
2:3.35-2ubuntu2.16, 2:3.49.1-1ubuntu1.9, 2:3.68.2-0ubuntu1.2, 2:3.82-1ubuntu0.1 04.11.2022 SB2022110401
SB2022110406
SB2022121901
and 18 more
#VU64764 - Access of Uninitialized Pointer
CVE-2022-34480
CWE-824 Low
No
No
Ubuntu Pro, 2:3.35-2ubuntu2.15, 2:3.49.1-1ubuntu1.8, 2:3.68-1ubuntu1.2, 2:3.68.2-0ubuntu1.1 29.06.2022 SB2022062902
SB2022070523
SB2022070726
and 8 more
#VU59379 - Improper input validation
CVE-2022-22747
CWE-20 Low
No
No
Ubuntu Pro, 2:3.35-2ubuntu2.15, 2:3.49.1-1ubuntu1.8, 2:3.68-1ubuntu1.2, 2:3.68.2-0ubuntu1.1 11.01.2022 SB2022011114
SB2022011115
SB2022011726
and 36 more
#VU58477 - Heap-based Buffer Overflow
CVE-2021-43527
CWE-122 High
No
No
2:3.28.40ubuntu0.16.04.14+esm1, 2:3.28.40ubuntu0.16.04.14+esm2, 2:3.35-2ubuntu2.13, 2:3.49.1-1ubuntu1.6, 2:3.61-1ubuntu2.1, 2:3.68-1ubuntu1.1 01.12.2021 SB2021120123
SB2021120124
SB2021120201
and 66 more
#VU47910 - Allocation of Resources Without Limits or Throttling
CVE-2020-25648
CWE-770 Medium
No
No
2:3.35-2ubuntu2.14, 2:3.49.1-1ubuntu1.7 21.10.2020 SB2020102132
SB2020102609
SB2021050605
and 18 more
#VU46019 - Cryptographic Issues
CVE-2020-6829
CWE-310 Low
No
No
2:3.28.4-0ubuntu0.12.04.10, 2:3.28.4-0ubuntu0.16.04.13, 2:3.35-2ubuntu2.11, 2:3.49.1-1ubuntu1.4 25.08.2020 SB2020082520
SB2020072974
SB2020072975
and 18 more
#VU45799 - Out-of-bounds read
CVE-2020-12403
CWE-125 Medium
No
No
2:3.28.4-0ubuntu0.12.04.11, 2:3.28.4-0ubuntu0.16.04.14, 2:3.35-2ubuntu2.12, 2:3.49.1-1ubuntu1.5 20.08.2020 SB2020082004
SB2020082005
SB2020072966
and 17 more
#VU45798 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-12401
CWE-327 Low
No
No
2:3.28.4-0ubuntu0.12.04.10, 2:3.28.4-0ubuntu0.16.04.13, 2:3.35-2ubuntu2.11, 2:3.49.1-1ubuntu1.4 20.08.2020 SB2020082004
SB2020082005
SB2020072965
and 19 more
#VU45797 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-12400
CWE-327 Low
No
No
2:3.28.4-0ubuntu0.12.04.10, 2:3.28.4-0ubuntu0.16.04.13, 2:3.35-2ubuntu2.11, 2:3.49.1-1ubuntu1.4 20.08.2020 SB2020082004
SB2020082005
SB2020072964
and 19 more
#VU29460 - Cryptographic Issues
CVE-2020-12402
CWE-310 Low
No
No
2:3.28.4-0ubuntu0.12.04.9, 2:3.28.4-0ubuntu0.14.04.5+esm6, 2:3.28.4-0ubuntu0.16.04.12, 2:3.35-2ubuntu2.9, 2:3.45-1ubuntu2.4, 2:3.49.1-1ubuntu1.2 02.07.2020 SB2020070208
SB2020071322
SB2020071401
and 23 more