Skip to content
Fencer Vulns
medium 5.9

CVE-2018-12404 json

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content.

published 2019-05-02 7 y ago modified 2026-06-17 4 mo ago also EUVD-2018-4378

cvss
5.9
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
44.2%
EPSS 44.2% chance of exploitation in 30 days, percentile 98%
public exploits
0
none known

Summary

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

Patch / fix

  • mozilla network_security_services 3.41
  • nss Debian 14, Debian 13, Debian 12 2:3.41-1

debian advisories DEBIAN-CVE-2018-12404

  • nss Ubuntu 14.04 LTS 2:3.28.4-0ubuntu0.14.04.4
  • nss Ubuntu 16.04 LTS 2:3.28.4-0ubuntu0.16.04.4
  • nss Ubuntu 18.04 LTS 2:3.35-2ubuntu2.1

ubuntu advisories UBUNTU-CVE-2018-12404

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • nspr RHEL 7 4.21.0-1.el7
  • nss RHEL 7 3.44.0-4.el7
  • nss-util RHEL 7 3.44.0-3.el7
  • nss-tools RHEL 7 3.44.0-4.el7
  • nss-softokn RHEL 7 3.44.0-5.el7
  • nss-sysinit RHEL 7 3.44.0-4.el7
  • nss-softokn-freebl RHEL 7 3.44.0-5.el7

red hat advisories RHSA-2019:2237

  • mozilla-nss SLES 12 SP4, SLES 12 SP3, SLES 12 SP2-BCL +13 more 3.40.1-58.18.1
  • mozilla-nspr SLES 12 SP4, SLES 12 SP3, SLES 12 SP2-BCL +13 more 4.20-19.6.1
  • MozillaFirefox SLES 12 SP4, SLES 12 SP3, SLES 12 SP2-BCL +13 more 60.4.0esr-109.55.1
  • MozillaFirefox SLE Module for Desktop Applications 15 60.5.0-3.24.2
  • mozilla-nss SLE Module for Basesystem 15 3.41.1-3.13.1
  • mozilla-nss SLE Module for Basesystem 15 3.40.1-3.7.2
  • mozilla-nspr SLE Module for Basesystem 15 4.20-3.3.2
  • MozillaFirefox SLE Module for Desktop Applications 15 60.4.0-3.21.1

suse advisories SUSE-SU-2018:4236-2SUSE-SU-2019:0273-1SUSE-SU-2018:4236-1SUSE-SU-2018:4235-1

  • mozilla-nss openSUSE Tumbleweed 3.69.1-1.2
  • MozillaFirefox openSUSE Leap 15.0 60.8.0-lp150.3.62.1
  • mozilla-nss openSUSE Leap 15.0 3.41.1-lp150.2.20.1
  • mozilla-nss openSUSE Leap 15.0 3.41.1-lp150.2.16.1

opensuse advisories openSUSE-SU-2024:11058-1openSUSE-SU-2019:1758-1openSUSE-SU-2019:0183-1

  • nss Alpine 3.24, Alpine 3.23, Alpine 3.22 +13 more 3.41-r0

alpine advisories ALPINE-CVE-2018-12404

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2018-12404 updated cvss 5.9

nss: Cache side-channel variant of the Bleichenbacher attack

  • Red Hat Enterprise Linux 5 nss Red Hat Enterprise Linux 6 nss, nss-tools, nss-sysinit Red Hat Enterprise Linux 8 mingw-nss, mingw32-nss, mingw64-nss Red Hat Virtualization 4 rhvm-appliance, redhat-virtualization-host-image-update
    affected: no fix planned “Will not fix”
  • Red Hat Ansible Tower 3.4 for RHEL 7 Server ansible-tower-34/ansible-tower-memcached 1.4.15-28, ansible-tower-35/ansible-tower-memcached 1.4.15-28, ansible-tower-37/ansible-tower-memcached-rhel7 1.4.15-28
    fixed: vendor fix RHBA-2020:0547
  • Red Hat Enterprise Linux Client (v. 7) nss 3.44.0-4.el7, nspr 4.21.0-1.el7, nss-util 3.44.0-3.el7, nss-tools 3.44.0-4.el7, nss-softokn 3.44.0-5.el7, nss-sysinit 3.44.0-4.el7, +1 more Red Hat Enterprise Linux Client Optional (v. 7) nss-devel 3.44.0-4.el7, nspr-devel 4.21.0-1.el7, nss-debuginfo 3.44.0-4.el7, nspr-debuginfo 4.21.0-1.el7, nss-util-devel 3.44.0-3.el7, nss-pkcs11-devel 3.44.0-4.el7, +4 more Red Hat Enterprise Linux ComputeNode (v. 7) nss 3.44.0-4.el7, nspr 4.21.0-1.el7, nss-util 3.44.0-3.el7, nss-tools 3.44.0-4.el7, nss-softokn 3.44.0-5.el7, nss-sysinit 3.44.0-4.el7, +1 more Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel 3.44.0-4.el7, nspr-devel 4.21.0-1.el7, nss-debuginfo 3.44.0-4.el7, nspr-debuginfo 4.21.0-1.el7, nss-util-devel 3.44.0-3.el7, nss-pkcs11-devel 3.44.0-4.el7, +4 more Red Hat Enterprise Linux Server (v. 7) nss 3.44.0-4.el7, nspr 4.21.0-1.el7, nss-util 3.44.0-3.el7, nss-tools 3.44.0-4.el7, nss-softokn 3.44.0-5.el7, nss-sysinit 3.44.0-4.el7, +1 more Red Hat Enterprise Linux Server Optional (v. 7) nss-debuginfo 3.44.0-4.el7, nss-pkcs11-devel 3.44.0-4.el7
    +2 more products
    Red Hat Enterprise Linux Workstation (v. 7) nss 3.44.0-4.el7, nspr 4.21.0-1.el7, nss-util 3.44.0-3.el7, nss-tools 3.44.0-4.el7, nss-softokn 3.44.0-5.el7, nss-sysinit 3.44.0-4.el7, +1 more Red Hat Enterprise Linux Workstation Optional (v. 7) nss-debuginfo 3.44.0-4.el7, nss-pkcs11-devel 3.44.0-4.el7
    fixed: vendor fix RHSA-2019:2237
  • Red Hat Enterprise Linux 8 nss, nss-util, nss-tools, nss-softokn, nss-sysinit, nss-softokn-freebl Red Hat OpenShift Enterprise 3 nss
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-21-040-04 updated cvss 5.9

Siemens RUGGEDCOM ROX II

  • Siemens RUGGEDCOM ROX MX5000 <V2.14.0 Siemens RUGGEDCOM ROX RX1400 <V2.14.0 Siemens RUGGEDCOM ROX RX1500 <V2.14.0 Siemens RUGGEDCOM ROX RX1501 <V2.14.0 Siemens RUGGEDCOM ROX RX1510 <V2.14.0 Siemens RUGGEDCOM ROX RX1511 <V2.14.0
    +2 more products
    Siemens RUGGEDCOM ROX RX1512 <V2.14.0 Siemens RUGGEDCOM ROX RX5000 <V2.14.0
    affected: fixed in V2.14.0, mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

44.25% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

  • Mozilla Network Security Services (NSS)

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.