Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
NSS library may mishandle large SSL data
published 2 months ago
Summary
The Network Security Services (NSS) packages on CentOS can incorrectly process unusually large encrypted data, which could cause crashes or allow denial‑of‑service attacks. Updating the NSS packages to the latest version adds a safety check that prevents this condition. Apply the current CentOS updates for nss, nss-devel, nss-pkcs11-devel, nss-softokn, and nss-softokn-devel as soon as possible.
What to do
- Update centos nss to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-devel to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-pkcs11-devel to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-softokn to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-softokn-devel to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-softokn-freebl to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-softokn-freebl-devel to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-sysinit to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-tools to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-util to version 3.67.0-7.el8.4.tuxcare.els9.
- Update centos nss-util-devel to version 3.67.0-7.el8.4.tuxcare.els9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:8.4 | centos | nss |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-devel |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-pkcs11-devel |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-softokn |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-softokn-devel |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-softokn-freebl |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-softokn-freebl-devel |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-sysinit |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-tools |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-util |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
| TuxCare:CentOS:8.4 | centos | nss-util-devel |
< 3.67.0-7.el8.4.tuxcare.els9 Fix: upgrade to 3.67.0-7.el8.4.tuxcare.els9
|
Original advisory text
nss: Fix of CVE-2024-0743
- Fix CVE-2024-0743: add defensive check for large ssl_DefSend return values
in ssl_SendSavedWriteData (Mozilla bug 1867408)
in ssl_SendSavedWriteData (Mozilla bug 1867408)
References
- https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1786358092.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-0743 Vendor Advisory
Timeline
Published10 Aug 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1786358092 · OSV
Track software like this
Free during beta