Covert timing channel in Mozilla NSS - CVE-2023-5388

Vulnerability identifier: #VU85267

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-5388

CWE-ID: CWE-385

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to insufficient fix for #VU84108 (CVE-2023-4421). A remote attacker can perform Marvin attack and gain access to sensitive information.

Mozilla NSS
Oracle Solaris
Amazon Linux AMI
Gentoo Linux
Oracle Linux
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Workstation Extension 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Fedora
CentOS
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Slackware Linux
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
Red Hat OpenShift Serverless
Migration Toolkit for Runtimes
Cryostat
Oracle Communications Network Analytics Data Director
Oracle Communications Cloud Native Core Binding Support Function
Oracle Communications Cloud Native Core Network Repository Function
App Connect Enterprise Certified Container
IBM MQ
IBM Power Hardware Management Console (HMC)
IBM Observability with Instana
Red Hat OpenShift Container Platform
JD Edwards EnterpriseOne Tools
Communications Unified Assurance
Oracle Communications Instant Messaging Server
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Juniper Secure Analytics (JSA)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
seamonkey
nss-softokn
nss (Red Hat package)
nss
nss-util
nss-util-devel
nss-tools
nss-sysinit
nss-softokn-freebl-devel
nss-softokn-freebl
nss-softokn-devel
nss-devel
mozilla-nss-tools
mozilla-nss-32bit
mozilla-nss-tools-debuginfo
libfreebl3-debuginfo
mozilla-nss
mozilla-nss-sysinit-debuginfo
libfreebl3
libsoftokn3
libsoftokn3-debuginfo
mozilla-nss-debuginfo-32bit
mozilla-nss-sysinit-debuginfo-32bit
mozilla-nss-certs-debuginfo-32bit
libsoftokn3-debuginfo-32bit
libfreebl3-debuginfo-32bit
mozilla-nss-certs-32bit
libsoftokn3-32bit
mozilla-nss-sysinit-32bit
libfreebl3-32bit
mozilla-nss-certs-debuginfo
mozilla-nss-certs
mozilla-nss-debuginfo
mozilla-nss-debugsource
mozilla-nss-devel
mozilla-nss-sysinit
mozilla-nss-sysinit-32bit-debuginfo
libsoftokn3-32bit-debuginfo
mozilla-nss-32bit-debuginfo
libfreebl3-32bit-debuginfo
mozilla-nss-certs-32bit-debuginfo
mozilla-nss-sysinit-64bit
mozilla-nss-sysinit-64bit-debuginfo
libsoftokn3-64bit
mozilla-nss-certs-64bit-debuginfo
libsoftokn3-64bit-debuginfo
mozilla-nss-certs-64bit
libfreebl3-64bit
libfreebl3-64bit-debuginfo
mozilla-nss-64bit-debuginfo
mozilla-nss-64bit
dev-libs/nss
libnss3 (Ubuntu package)
thunderbird (Ubuntu package)
mozilla-thunderbird
mozilla-firefox
firefox-esr (Debian package)
thunderbird (Red Hat package)
thunderbird
thunderbird (Debian package)
MozillaThunderbird-debuginfo
MozillaThunderbird
MozillaThunderbird-debugsource
MozillaThunderbird-translations-common
MozillaThunderbird-translations-other
firefox (Red Hat package)
firefox
firefox (Ubuntu package)
firefox-flatpak
firefox-debuginfo
firefox-debugsource
Oracle Communications Policy Management
PowerStore X
PowerStore T
IBM Cloud Pak for Watson AIOps
Storage Resource Manager
EMC Cloud Tiering Appliance
Robotic Process Automation for Cloud Pak
Oracle Communications Cloud Native Core Policy
Mozilla Firefox
Firefox ESR
Firefox for Android
Mozilla Thunderbird
Dell EMC Storage Monitoring and Reporting (SMR)
Dell EMC VxRail Appliance

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Oracle Solaris - addressed in versions 11.3 ESU 36.33, 11.4 SRU 68, 11.4 SRU 71
Red Hat OpenShift Serverless - update to 1.31.1
Migration Toolkit for Runtimes - update to 1.2.4
Red Hat OpenShift Container Platform - addressed in versions 4.11.57, 4.12.47, 4.13.29, 4.14.9, 4.14.10
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
Juniper Secure Analytics (JSA) - update to 7.5.0 UP8 IF03
Mozilla Firefox - update to 124.0
Firefox for Android - update to 124.0
Mozilla Thunderbird - update to 115.9.0
Firefox ESR - update to 115.9.0
seamonkey - update to 2.53.18.2
seamonkey - addressed in versions 2.53.18.2-1.el7, 2.53.18.2-1.el8, 2.53.18.2-1.fc38, 2.53.18.2-1.fc39, 2.53.18.2-1.fc40
PowerStore X - update to 3.2.1.4-2386214
nss-softokn - update to 3.53.1-6.49
nss (Red Hat package) - addressed in versions 3.79.0-12.el8_6, 3.90.0-4.el8_8, 3.90.0-4.el8_9, 3.90.0-4.el9_2
nss - update to 3.90.0-3
nss-util - update to 3.90.0-7.0.1
nss-util-devel - update to 3.90.0-7.0.1
nss-tools - update to 3.90.0-7.0.1
nss-sysinit - update to 3.90.0-7.0.1
nss-softokn-freebl-devel - update to 3.90.0-7.0.1
nss-softokn-freebl - update to 3.90.0-7.0.1
nss-softokn-devel - update to 3.90.0-7.0.1
nss-softokn - update to 3.90.0-7.0.1
nss-devel - update to 3.90.0-7.0.1
nss - update to 3.90.0-7.0.1
mozilla-nss-tools - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-32bit - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-tools-debuginfo - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
libfreebl3-debuginfo - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-sysinit-debuginfo - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
libfreebl3 - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
libsoftokn3 - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
libsoftokn3-debuginfo - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-debuginfo-32bit - addressed in versions 3.90.2-58.111.1, 3.101.1-58.118.1
mozilla-nss-sysinit-debuginfo-32bit - addressed in versions 3.90.2-58.111.1, 3.101.1-58.118.1
mozilla-nss-certs-debuginfo-32bit - addressed in versions 3.90.2-58.111.1, 3.101.1-58.118.1
libsoftokn3-debuginfo-32bit - addressed in versions 3.90.2-58.111.1, 3.101.1-58.118.1
libfreebl3-debuginfo-32bit - addressed in versions 3.90.2-58.111.1, 3.101.1-58.118.1
mozilla-nss-certs-32bit - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
libsoftokn3-32bit - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-sysinit-32bit - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
libfreebl3-32bit - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-certs-debuginfo - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-certs - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-debuginfo - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-debugsource - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-devel - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-sysinit - addressed in versions 3.90.2-58.111.1, 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-58.118.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-sysinit-32bit-debuginfo - addressed in versions 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
libsoftokn3-32bit-debuginfo - addressed in versions 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-32bit-debuginfo - addressed in versions 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
libfreebl3-32bit-debuginfo - addressed in versions 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-certs-32bit-debuginfo - addressed in versions 3.90.2-150000.3.108.1, 3.90.2-150400.3.39.1, 3.101.1-150000.3.117.1, 3.101.2-150400.3.48.1
mozilla-nss-sysinit-64bit - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
mozilla-nss-sysinit-64bit-debuginfo - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
libsoftokn3-64bit - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
mozilla-nss-certs-64bit-debuginfo - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
libsoftokn3-64bit-debuginfo - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
mozilla-nss-certs-64bit - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
libfreebl3-64bit - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
libfreebl3-64bit-debuginfo - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
mozilla-nss-64bit-debuginfo - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
mozilla-nss-64bit - addressed in versions 3.90.2-150400.3.39.1, 3.101.2-150400.3.48.1
dev-libs/nss - update to 3.98
libnss3 (Ubuntu package) - addressed in versions 2:3.98-0ubuntu0.20.04.1, 2:3.98-0ubuntu0.20.04.2, 2:3.98-0ubuntu0.22.04.1, 2:3.98-0ubuntu0.22.04.2, 2:3.98-0ubuntu0.23.10.1
PowerStore T - update to 4.0.0.2-2365061
IBM Cloud Pak for Watson AIOps - update to 4.4.1
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
App Connect Enterprise Certified Container - addressed in versions 5.0.14, 11.2.0
IBM Qradar SIEM - update to 7.5.0 Update Pack 8 IF01
Dell EMC VxRail Appliance - addressed in versions 8.0.212, 8.320
IBM MQ - addressed in versions 9.3.0.20 FixPack, 9.3.5.2
IBM Power Hardware Management Console (HMC) - addressed in versions 10.2.1040.0 SP2, 10.3.1060.0
EMC Cloud Tiering Appliance - update to 13.2.0.2.29
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.17, 23.0.16
thunderbird (Ubuntu package) - addressed in versions 1:115.9.0+build1-0ubuntu0.20.04.1, 1:115.9.0+build1-0ubuntu0.22.04.1, 1:115.9.0+build1-0ubuntu0.23.10.1
mozilla-thunderbird - update to 115.9.0
mozilla-firefox - update to 115.9.0esr
firefox-esr (Debian package) - addressed in versions 115.9.0esr-1~deb11u1, 115.9.0esr-1~deb12u1
thunderbird (Red Hat package) - addressed in versions 115.9.0-1.el7_9, 115.9.0-1.el8_2, 115.9.0-1.el8_4, 115.9.0-1.el8_6, 115.9.0-1.el8_8, 115.9.0-1.el8_9, 115.9.0-1.el9_0, 115.9.0-1.el9_2, 115.9.0-1.el9_3
thunderbird - addressed in versions 115.9.0-1.fc38, 115.9.0-1.fc39, 115.9.0-1.fc40
thunderbird (Debian package) - addressed in versions 1:115.9.0-1~deb11u1, 1:115.9.0-1~deb12u1
thunderbird - update to 115.9.0-1.0.1
MozillaThunderbird-debuginfo - update to 115.9.0-150200.8.154.1
MozillaThunderbird - update to 115.9.0-150200.8.154.1
MozillaThunderbird-debugsource - update to 115.9.0-150200.8.154.1
MozillaThunderbird-translations-common - update to 115.9.0-150200.8.154.1
MozillaThunderbird-translations-other - update to 115.9.0-150200.8.154.1
firefox (Red Hat package) - addressed in versions 115.9.1-1.el7_9, 115.9.1-1.el8_2, 115.9.1-1.el8_4, 115.9.1-1.el8_6, 115.9.1-1.el8_8, 115.9.1-1.el8_9, 115.9.1-1.el9_0, 115.9.1-1.el9_2, 115.9.1-1.el9_3
firefox - update to 115.9.1-1.0.1
firefox (Ubuntu package) - update to 124.0+build1-0ubuntu0.20.04.1
firefox-flatpak - update to 124.0-1
firefox - addressed in versions 124.0-1.fc38, 124.0-1.fc39, 124.0-1.fc40
firefox-debuginfo - update to 128.8.0-1
firefox - update to 128.8.0-1
firefox-debugsource - update to 128.8.0-1
IBM Observability with Instana - update to 267

• https://people.redhat.com/~hkario/marvin/
• https://bugzilla.redhat.com/show_bug.cgi?id=2243644

• Timing side-channel attack in Mozilla NSS
• Red Hat Enterprise Linux 8.8 Extended Update Support update for nss
• Red Hat Enterprise Linux 8 update for nss
• Red Hat Enterprise Linux 8.6 Extended Update Support update for nss
• Red Hat Enterprise Linux 9.2 Extended Update Support update for nss
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Red Hat OpenShift Container Platform 4.12 update for golang
• Amazon Linux AMI update for nss-softokn
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in Red Hat build of Cryostat 2 on RHEL 8
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• SUSE update for mozilla-nss
• SUSE update for mozilla-nss
• SUSE update for mozilla-nss
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
• Multiple vulnerabilities in Mozilla Firefox
• Multiple vulnerabilities in Mozilla Thunderbird
• Fedora 38 update for firefox
• Fedora 40 update for firefox
• Fedora 39 update for firefox
• Fedora 40 update for thunderbird
• Fedora 39 update for thunderbird
• Fedora 38 update for thunderbird
• Fedora 39 Flatpaks update for firefox-flatpak
• Slackware Linux update for mozilla-firefox
• Slackware Linux update for mozilla-thunderbird
• Ubuntu update for firefox
• Red Hat Enterprise Linux 7 update for firefox
• Red Hat Enterprise Linux 8.8 Extended Update Support update for firefox
• Red Hat Enterprise Linux 8 update for firefox
• Red Hat Enterprise Linux 9.2 Extended Update Support update for firefox
• Red Hat Enterprise Linux 8 update for firefox
• Red Hat Enterprise Linux 9 update for firefox
• Red Hat Enterprise Linux 9.0 Extended Update Support update for firefox
• Red Hat Enterprise Linux 8.6 Extended Update Support update for firefox
• Red Hat Enterprise Linux 8 update for firefox
• Red Hat Enterprise Linux 9.2 Extended Update Support update for thunderbird
• Red Hat Enterprise Linux 9 update for thunderbird
• Red Hat Enterprise Linux 8 update for thunderbird
• Red Hat Enterprise Linux 7 update for thunderbird
• Red Hat Enterprise Linux 9.0 Extended Update Support update for thunderbird
• Red Hat Enterprise Linux 8.8 Extended Update Support update for thunderbird
• Red Hat Enterprise Linux 8.6 Extended Update Support update for thunderbird
• Red Hat Enterprise Linux 8 update for thunderbird
• Red Hat Enterprise Linux 8 update for thunderbird
• Ubuntu update for thunderbird
• Fedora 40 update for seamonkey
• Fedora 39 update for seamonkey
• Fedora 38 update for seamonkey
• Fedora EPEL 8 update for seamonkey
• Fedora EPEL 7 update for seamonkey
• Slackware Linux update for seamonkey
• CentOS 7 update for thunderbird
• CentOS 7 update for firefox
• SUSE update for MozillaThunderbird
• Ubuntu update for nss
• Ubuntu update for nss
• Multiple vulnerabilities in IBM QRadar SIEM
• Oracle Solaris update for thrid-party components
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Debian update for firefox-esr
• Debian update for thunderbird
• SUSE update for Recommended update for mozilla-nss
• SUSE update for mozilla-nss
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• SUSE update for Recommended update for mozilla-nss
• Amazon Linux AMI update for nss
• Multiple vulnerabilities in IBM MQ
• Oracle Solaris update for thrid-party components
• Covert timing channel in IBM Power HMC
• IBM Robotic Process Automation for Cloud Pak update for RedHat UBI minimal
• Multiple vulnerabilities in Dell PowerStore X
• Multiple vulnerabilities in Dell PowerStore T Family
• openEuler 22.03 LTS SP4 update for firefox
• openEuler 22.03 LTS SP3 update for firefox
• Anolis OS update for thunderbird
• Anolis OS update for firefox
• Anolis OS update for thunderbird
• Anolis OS update for firefox
• Anolis OS update for nss
• Multiple vulnerabilities in Dell VxRail Appliance
• Multiple vulnerabilities in Oracle Communications Instant Messaging Server
• Multiple vulnerabilities in Communications Unified Assurance
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Repository Function
• Multiple vulnerabilities in Oracle Communications Network Analytics Data Director
• Multiple vulnerabilities in Oracle Communications Policy Management
• Dell RecoverPoint for Virtual Machines update for third-party components
• Gentoo update for Mozilla Network Security Service (NSS)
• Multiple vulnerabilities in JD Edwards EnterpriseOne Tools