Known vulnerabilities in nss-util

Known vulnerabilities in nss-util

Vendor: openEuler

Software: nss-util

Software CPE: cpe:2.3:o:openeuler:nss-util:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 13

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU139009 - Integer overflow CVE-2026-16389	CWE-190	Low	No	No	3.94.0-10	22.07.2026	SB2026072201 SB2026072302 SB2026073045 and 1 more
#VU84108 - Covert Timing Channel CVE-2023-4421	CWE-385	Medium	No	No	3.54.0-13	12.12.2023	SB2023121264 SB2023121268 SB2024011506 and 3 more
#VU59379 - Improper input validation CVE-2022-22747	CWE-20	Low	No	No	3.54.0-11, 3.72.0-10	11.01.2022	SB2022011114 SB2022011115 SB2022011726 and 36 more
#VU58477 - Heap-based Buffer Overflow CVE-2021-43527	CWE-122	High	No	No	3.54.0-8	01.12.2021	SB2021120123 SB2021120124 SB2021120201 and 66 more
#VU47910 - Allocation of Resources Without Limits or Throttling CVE-2020-25648	CWE-770	Medium	No	No	3.54.0-6	21.10.2020	SB2020102132 SB2020102609 SB2021050605 and 18 more
#VU47197 - Heap-based Buffer Overflow CVE-2019-17006	CWE-122	High	No	No	3.54.0-2	30.09.2020	SB2019090221 SB2020093089 SB2020062437 and 19 more
#VU46019 - Cryptographic Issues CVE-2020-6829	CWE-310	Low	No	No	3.54.0-2	25.08.2020	SB2020082520 SB2020072974 SB2020072975 and 18 more
#VU45799 - Out-of-bounds read CVE-2020-12403	CWE-125	Medium	No	No	3.54.0-6	20.08.2020	SB2020082004 SB2020082005 SB2020072966 and 17 more
#VU45798 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-12401	CWE-327	Low	No	No	3.54.0-2	20.08.2020	SB2020082004 SB2020082005 SB2020072965 and 19 more
#VU45797 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-12400	CWE-327	Low	No	No	3.54.0-2	20.08.2020	SB2020082004 SB2020082005 SB2020072964 and 19 more
#VU29460 - Cryptographic Issues CVE-2020-12402	CWE-310	Low	No	No	3.54.0-2	02.07.2020	SB2020070208 SB2020071322 SB2020071401 and 23 more
#VU23467 - Improper input validation CVE-2019-17007	CWE-20	Medium	No	No	3.54.0-2	09.12.2019	SB2019112801 SB2019120912 SB2019120913 and 4 more
#VU23369 - Use After Free CVE-2019-11756	CWE-416	High	No	No	3.54.0-2	03.12.2019	SB2019120312 SB2019120314 SB2019121002 and 16 more