crítica
CVE-2020-12403
nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, CBL-Mariner, Photon OS. Más baja según Red Hat (media), Amazon (media), Oracle (media), Rocky Linux (media), Ubuntu (media).
Descripción
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| CBL-Mariner 1.0 | nss | 0:3.44-6.cm1 |
| CBL-Mariner 2.0 | nss | 0:3.44-10.cm2 |
| Photon OS 1.0 | nss | 3.44-4.ph1 |
| Photon OS 2.0 | nss | 3.44-5.ph2 |
| Photon OS 3.0 | nss | 3.44-6.ph3 |
| alpine 3.12 | nss | 3.55-r0 |
| alpine 3.13 | nss | 3.55-r0 |
| alpine 3.14 | nss | 3.55-r0 |
| alpine 3.15 | nss | 3.55-r0 |
| alpine 3.16 | nss | 3.55-r0 |
| alpine 3.17 | nss | 3.55-r0 |
| alpine 3.18 | nss | 3.55-r0 |
Mostrar las 104 entradas de 43 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| CBL-Mariner 1.0 | nss | 0:3.44-6.cm1 |
| CBL-Mariner 2.0 | nss | 0:3.44-10.cm2 |
| Photon OS 1.0 | nss | 3.44-4.ph1 |
| Photon OS 2.0 | nss | 3.44-5.ph2 |
| Photon OS 3.0 | nss | 3.44-6.ph3 |
| alpine 3.12 | nss | 3.55-r0 |
| alpine 3.13 | nss | 3.55-r0 |
| alpine 3.14 | nss | 3.55-r0 |
| alpine 3.15 | nss | 3.55-r0 |
| alpine 3.16 | nss | 3.55-r0 |
| alpine 3.17 | nss | 3.55-r0 |
| alpine 3.18 | nss | 3.55-r0 |
| alpine 3.19 | nss | 3.55-r0 |
| alpine 3.20 | nss | 3.55-r0 |
| alpine 3.21 | nss | 3.55-r0 |
| alpine 3.22 | nss | 3.55-r0 |
| alpine 3.23 | nss | 3.55-r0 |
| alpine 3.24 | nss | 3.55-r0 |
| alpine edge | nss | 3.55-r0 |
| amazon linux 1 | nspr | 4.25.0-2.45.amzn1 |
| amazon linux 1 | nspr-debuginfo | 4.25.0-2.45.amzn1 |
| amazon linux 1 | nspr-devel | 4.25.0-2.45.amzn1 |
| amazon linux 1 | nss-softokn | 3.53.1-6.46.amzn1 |
| amazon linux 1 | nss-softokn-debuginfo | 3.53.1-6.46.amzn1 |
| amazon linux 1 | nss-softokn-devel | 3.53.1-6.46.amzn1 |
| amazon linux 1 | nss-softokn-freebl | 3.53.1-6.46.amzn1 |
| amazon linux 1 | nss-softokn-freebl-devel | 3.53.1-6.46.amzn1 |
| amazon linux 1 | nss-util | 3.53.1-1.58.amzn1 |
| amazon linux 1 | nss-util-debuginfo | 3.53.1-1.58.amzn1 |
| amazon linux 1 | nss-util-devel | 3.53.1-1.58.amzn1 |
| amazon linux 2 | nspr | 4.25.0-2.amzn2 |
| amazon linux 2 | nspr-debuginfo | 4.25.0-2.amzn2 |
| amazon linux 2 | nspr-devel | 4.25.0-2.amzn2 |
| amazon linux 2 | nss | 3.53.1-3.amzn2 |
| amazon linux 2 | nss-debuginfo | 3.53.1-3.amzn2 |
| amazon linux 2 | nss-devel | 3.53.1-3.amzn2 |
| amazon linux 2 | nss-pkcs11-devel | 3.53.1-3.amzn2 |
| amazon linux 2 | nss-softokn | 3.53.1-6.amzn2 |
| amazon linux 2 | nss-softokn-debuginfo | 3.53.1-6.amzn2 |
| amazon linux 2 | nss-softokn-devel | 3.53.1-6.amzn2 |
| amazon linux 2 | nss-softokn-freebl | 3.53.1-6.amzn2 |
| amazon linux 2 | nss-softokn-freebl-devel | 3.53.1-6.amzn2 |
| amazon linux 2 | nss-sysinit | 3.53.1-3.amzn2 |
| amazon linux 2 | nss-tools | 3.53.1-3.amzn2 |
| amazon linux 2 | nss-util | 3.53.1-1.amzn2 |
| amazon linux 2 | nss-util-debuginfo | 3.53.1-1.amzn2 |
| amazon linux 2 | nss-util-devel | 3.53.1-1.amzn2 |
| debian 10 | nss | 2:3.42.1-1+deb10u6 |
| debian 11 | nss | 2:3.55-1 |
| debian 12 | nss | 2:3.55-1 |
| debian 13 | nss | 2:3.55-1 |
| debian 14 | nss | 2:3.55-1 |
| debian 9 | nss | 2:3.26.2-1.1+deb9u2 |
| echo | nss | 2:3.55-1 |
| Oracle Linux 7 | nspr | 4.25.0-2.el7_9 |
| Oracle Linux 7 | nspr-devel | 4.25.0-2.el7_9 |
| Oracle Linux 7 | nss | 3.53.1-3.el7_9 |
| Oracle Linux 7 | nss-devel | 3.53.1-3.el7_9 |
| Oracle Linux 7 | nss-pkcs11-devel | 3.53.1-3.el7_9 |
| Oracle Linux 7 | nss-softokn | 3.53.1-6.0.1.el7_9 |
| Oracle Linux 7 | nss-softokn-devel | 3.53.1-6.0.1.el7_9 |
| Oracle Linux 7 | nss-softokn-freebl | 3.53.1-6.0.1.el7_9 |
| Oracle Linux 7 | nss-softokn-freebl-devel | 3.53.1-6.0.1.el7_9 |
| Oracle Linux 7 | nss-sysinit | 3.53.1-3.el7_9 |
| Oracle Linux 7 | nss-tools | 3.53.1-3.el7_9 |
| Oracle Linux 7 | nss-util | 3.53.1-1.el7_9 |
| Oracle Linux 7 | nss-util-devel | 3.53.1-1.el7_9 |
| Oracle Linux 8 | nss | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-devel | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-softokn | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-softokn-devel | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-softokn-freebl | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-softokn-freebl-devel | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-sysinit | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-tools | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-util | 3.53.1-17.el8_3 |
| Oracle Linux 8 | nss-util-devel | 3.53.1-17.el8_3 |
| Red Hat | nss | sin corrección indicada |
| Red Hat | nss-devel | sin corrección indicada |
| Red Hat | nss-pkcs11-devel | sin corrección indicada |
| Red Hat | nss-sysinit | sin corrección indicada |
| Red Hat | nss-tools | sin corrección indicada |
| rocky 8 | nss | 3.53.1-17.el8_3 |
| rocky 8 | nss-devel | 3.53.1-17.el8_3 |
| rocky 8 | nss-softokn | 3.53.1-17.el8_3 |
| rocky 8 | nss-softokn-devel | 3.53.1-17.el8_3 |
| rocky 8 | nss-softokn-freebl | 3.53.1-17.el8_3 |
| rocky 8 | nss-softokn-freebl-devel | 3.53.1-17.el8_3 |
| rocky 8 | nss-sysinit | 3.53.1-17.el8_3 |
| rocky 8 | nss-tools | 3.53.1-17.el8_3 |
| rocky 8 | nss-util | 3.53.1-17.el8_3 |
| rocky 8 | nss-util-devel | 3.53.1-17.el8_3 |
| root.io debian 11 | rootio-nss | 2:3.55-1 |
| root.io debian 12 | rootio-nss | 2:3.55-1 |
| root.io debian 13 | rootio-nss | 2:3.55-1 |
| seal Red Hat 7 | nss | 3.53.1-3.el7_9+sp999 |
| seal Red Hat 7 | seal-nss | 3.53.1-3.el7_9+sp999 |
| ubuntu 14.04-ESM | nss | 2:3.28.4-0ubuntu0.14.04.5+esm8 |
| ubuntu 16.04 | nss | 2:3.28.4-0ubuntu0.16.04.14 |
| ubuntu 16.04-ESM | nss | 2:3.28.4-0ubuntu0.16.04.14 |
| ubuntu 18.04 | nss | 2:3.35-2ubuntu2.12 |
| ubuntu 18.04-ESM | nss | 2:3.35-2ubuntu2.12 |
| ubuntu 20.04 | nss | 2:3.49.1-1ubuntu1.5 |
| ubuntu 20.04-ESM | nss | 2:3.49.1-1ubuntu1.5 |
Referencias
- https://access.redhat.com/errata/RHSA-2021:0538
- https://access.redhat.com/security/cve/CVE-2020-12403
- https://bugzilla.redhat.com/show_bug.cgi?id=1826187
- https://bugzilla.redhat.com/show_bug.cgi?id=1853983
- https://bugzilla.redhat.com/show_bug.cgi?id=1868931
- https://bugzilla.redhat.com/show_bug.cgi?id=1896431
- https://bugzilla.redhat.com/show_bug.cgi?id=1896432
- https://bugzilla.redhat.com/show_bug.cgi?id=1896933
Las 23 referencias
- https://bugzilla.redhat.com/show_bug.cgi?id=1898953
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12400
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12401
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12403
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6829
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes
- https://errata.rockylinux.org/RLSA-2021:0538
- https://linux.oracle.com/cve/CVE-2020-12403.html
- https://linux.oracle.com/errata/ELSA-2021-0538.html
- https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html
- https://nvd.nist.gov/vuln/detail/CVE-2020-12403
- https://security.netapp.com/advisory/ntap-20230324-0006/
- https://ubuntu.com/security/notices/USN-4476-1
- https://www.cve.org/CVERecord?id=CVE-2020-12403