<p>There is no fixed version for <code>Centos:7</code> <code>nss-tools</code>.</p>

Covert Timing Channel Affecting nss-tools package, versions *

Snyk CVSS

Attack Complexity High

Confidentiality High

Threat Intelligence

EPSS 0.13% (48^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-CENTOS7-NSSTOOLS-2003333
published 26 Jul 2021
disclosed 9 Sep 2020

Report a new vulnerability Found a mistake?

Introduced: 9 Sep 2020

CVE-2020-12413 Open this link in a new tab CWE-385 Open this link in a new tab CWE-200 Open this link in a new tab

How to fix?

There is no fixed version for Centos:7 nss-tools.

NVD Description

Note: Versions mentioned in the description apply only to the upstream nss-tools package and not the nss-tools package as distributed by Centos. See How to fix? for Centos:7 relevant fixed versions and status.

The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support for DHE ciphersuites.