Man-in-the-middle attack in Mozilla NSS - CVE-2018-12384

Vulnerability identifier: #VU15735

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-12384

CWE-ID: CWE-300

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to conduct man-in-the-middle attack on the target system.

The weakness exists due to ServerHello.random is all zero when handling a v2-compatible ClientHello. A remote attacker can use man-in-the-middle techniques to conduct passive replay attack and obtain potentially sensitive information.

Mozilla NSS
Amazon Linux AMI
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
Opensuse
Fedora
nss (Ubuntu package)
nss (Alpine package)
nss-util
nss-softokn
nss
nspr
Data Computing Appliance (DCA)
EMC Cloud Tiering Appliance
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)

The vulnerability has been fixed in the versions 3.36.5, 3.39.

Mozilla NSS - addressed in versions 3.36.5, 3.39
nss (Alpine package) - update to 3.36.1-r1
Data Computing Appliance (DCA) - update to 3.5.2.0
nss-util - addressed in versions 3.39.0-1.0.fc27, 3.39.0-1.0.fc28, 3.39.0-2.fc29
nss-softokn - addressed in versions 3.39.0-1.0.fc27, 3.39.0-1.0.fc28, 3.39.0-2.fc29
nss - addressed in versions 3.39.0-1.0.fc27, 3.39.0-1.0.fc28, 3.39.0-2.fc29
nspr - addressed in versions 4.20.0-1.fc27, 4.20.0-1.fc28, 4.20.0-1.fc29
Dell EMC Unity Operating Environment (OE) - update to 5.0.0.0.5.116
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.0.0.5.116
EMC Cloud Tiering Appliance - update to 12.1.0.65

• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.5_release_notes
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

• Information disclosure in Mozilla NSS
• OpenSUSE Linux update for mozilla-nss
• OpenSUSE Linux update for mozilla-nspr and mozilla-nss
• Ubuntu update for NSS
• Amazon Linux AMI update for nss
• Red Hat update for nss
• Red Hat update for nss
• Man-in-the-middle attack in nss (Alpine package)
• Multiple vulnerabilities in Dell EMC Unity Family
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Multiple vulnerabilities in Dell EMC Cloud Tiering Appliance Family
• Fedora 28 update for nspr, nss, nss-softokn, nss-util
• Fedora 29 update for nspr, nss, nss-softokn, nss-util
• Fedora 27 update for nspr, nss, nss-softokn, nss-util