Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2016-8635

Date: August 1, 2018

It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.

Severity Score

Related Resources (7)

http://rhn.redhat.com/errata/RHSA-2016-2779.html
https://security.gentoo.org/glsa/201701-46
https://nvd.nist.gov/vuln/detail/CVE-2016-8635
http://www.securityfocus.com/bid/94346
https://access.redhat.com/security/cve/CVE-2016-8635
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8635
https://www.mend.io/vulnerability-database/CVE-2016-8635

Severity Score

Weakness Type (CWE)

Improperly Implemented Security Check for Standard

CWE-358

Key Management Errors

CWE-320

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us