CVE catalog

CVE-2019-11727

nss: CVE-2019-11727

Severity: Medium · CVSS 5CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Published: Jul 9, 2019, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.81% · Oct 25, 2026

A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox < 68.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	nss	sid	`2:3.131.1-1`	fixed
Debian	nss	forky	`2:3.131.1-1`	fixed
Debian	nss	trixie	`2:3.110-1+deb13u4`	fixed
Debian	nss	trixie-security	`2:3.110-1+deb13u4`	fixed
Debian	nss	bookworm	`2:3.87.1-1+deb12u2`	fixed
Debian	nss	bookworm-security	`2:3.87.1-1+deb12u4`	fixed
Ubuntu	firefox	16.04	`41.0.2+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`42.0+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`44.0+build3-0ubuntu2`	vulnerable
Ubuntu	firefox	16.04	`44.0.1+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`44.0.2+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`45.0+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`45.0.1+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`45.0.2+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	16.04	`46.0+build5-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`46.0.1+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`47.0+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`48.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`49.0+build4-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`49.0.2+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`50.0+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`50.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`50.1.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`51.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`51.0.1+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`52.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`52.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`52.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`53.0+build6-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`53.0.2+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`53.0.3+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`54.0+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`55.0.1+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`55.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`56.0+build6-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`56.0+build6-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`57.0+build4-0ubuntu0.16.04.5`	vulnerable
Ubuntu	firefox	16.04	`57.0+build4-0ubuntu0.16.04.6`	vulnerable
Ubuntu	firefox	16.04	`57.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`57.0.3+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`57.0.4+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`58.0+build6-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`58.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`58.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`59.0+build5-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`59.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`59.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`59.0.2+build1-0ubuntu0.16.04.3`	vulnerable
Ubuntu	firefox	16.04	`60.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`60.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`60.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`61.0+build3-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`61.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`62.0+build2-0ubuntu0.16.04.3`	vulnerable
Ubuntu	firefox	16.04	`62.0+build2-0ubuntu0.16.04.4`	vulnerable
Ubuntu	firefox	16.04	`62.0+build2-0ubuntu0.16.04.5`	vulnerable
Ubuntu	firefox	16.04	`62.0.3+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`63.0+build2-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`63.0.3+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`64.0+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`65.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`65.0.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0+build3-0ubuntu0.16.04.2`	vulnerable
Ubuntu	firefox	16.04	`66.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0.3+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0.4+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`66.0.5+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`67.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`67.0.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`67.0.2+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`67.0.3+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`67.0.4+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	firefox	16.04	`68.0+build3-0ubuntu0.16.04.1`	fixed
Ubuntu	thunderbird	16.04	`1:38.3.0+build1-0ubuntu2`	vulnerable
Ubuntu	thunderbird	16.04	`1:38.5.1+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	16.04	`1:38.6.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	16.04	`1:38.7.2+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:38.8.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.2.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.3.0+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.4.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.5.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.7.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:45.8.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.1.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.2.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.3.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.4.0+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.5.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.6.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.7.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.8.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:52.9.1+build3-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.2.1+build1-0ubuntu0.16.04.4`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.4.0+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.5.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.6.1+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.7.0+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.7.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.7.2+build2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.8.0+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.9.0+build1-0ubuntu0.16.04.2`	vulnerable
Ubuntu	thunderbird	16.04	`1:60.9.1+build1-0ubuntu0.16.04.1`	vulnerable
Ubuntu	thunderbird	16.04	`1:68.7.0+build1-0ubuntu0.16.04.2`	fixed
Ubuntu	firefox	18.04	`56.0+build6-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`57.0.1+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`59.0.1+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`59.0.2+build1-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`60.0+build2-0ubuntu1`	vulnerable
Ubuntu	firefox	18.04	`60.0.1+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`60.0.2+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`61.0+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`61.0.1+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`62.0+build2-0ubuntu0.18.04.3`	vulnerable
Ubuntu	firefox	18.04	`62.0+build2-0ubuntu0.18.04.4`	vulnerable
Ubuntu	firefox	18.04	`62.0+build2-0ubuntu0.18.04.5`	vulnerable
Ubuntu	firefox	18.04	`62.0.3+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`63.0+build2-0ubuntu0.18.04.2`	vulnerable
Ubuntu	firefox	18.04	`63.0.3+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`64.0+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`65.0+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`65.0.1+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.1+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.2+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.3+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.4+build3-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`66.0.5+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`67.0+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`67.0.1+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`67.0.2+build2-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`67.0.3+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`67.0.4+build1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	firefox	18.04	`68.0+build3-0ubuntu0.18.04.1`	fixed
Ubuntu	mozjs52	18.04	`52.3.1-0ubuntu3`	vulnerable
Ubuntu	mozjs52	18.04	`52.3.1-7fakesync1`	vulnerable
Ubuntu	mozjs52	18.04	`52.8.1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mozjs52	18.04	`52.9.1-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mozjs38	18.04	`38.8.0~repack1-0ubuntu1`	vulnerable
Ubuntu	mozjs38	18.04	`38.8.0~repack1-0ubuntu3`	vulnerable
Ubuntu	mozjs38	18.04	`38.8.0~repack1-0ubuntu4`	vulnerable
Ubuntu	mozjs52	20.04	`52.9.1-1build1`	vulnerable
Ubuntu	mozjs52	20.04	`52.9.1-1ubuntu3`	vulnerable
Suse	mozilla-nspr	linux enterprise server 11 sp4-ltss	`4.25-29.12.2`	fixed
Suse	mozilla-nss	linux enterprise server 11 sp4-ltss	`3.53.1-38.23.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	nss	source	sid	`2:3.45-1`	not yet assigned	Not reported	Not reported
Debian	nss	source	forky	`2:3.45-1`	not yet assigned	Not reported	Not reported
Debian	nss	source	trixie	`2:3.45-1`	not yet assigned	Not reported	Not reported
Debian	nss	source	bookworm	`2:3.45-1`	not yet assigned	Not reported	Not reported
Ubuntu	firefox	deb	16.04	`68.0+build3-0ubuntu0.16.04.1`	Not reported	UBUNTU-CVE-2019-11727	Not reported
Ubuntu	thunderbird	deb	16.04	`1:68.7.0+build1-0ubuntu0.16.04.2`	Not reported	UBUNTU-CVE-2019-11727	Not reported
Ubuntu	firefox	deb	18.04	`68.0+build3-0ubuntu0.18.04.1`	Not reported	UBUNTU-CVE-2019-11727	Not reported
Suse	mozilla-nspr	rpm	linux enterprise server 11 sp4-ltss	`4.25-29.12.2`	Not reported	SUSE-SU-2020:14418-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server 11 sp4-ltss	`3.53.1-38.23.1`	Not reported	SUSE-SU-2020:14418-1	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libnss3]Unknown
Source package: [nss]
Details (4)
- 2:3.87.1-1+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u4 · amd64 · bookworm-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u4 · arm64 · bookworm-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
[libnss3-dev]Unknown
Source package: [nss]
Details (4)
- 2:3.87.1-1+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u4 · amd64 · bookworm-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u4 · arm64 · bookworm-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
[libnss3-tools]Unknown
Source package: [nss]
Details (4)
- 2:3.87.1-1+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u4 · amd64 · bookworm-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12
- 2:3.87.1-1+deb12u4 · arm64 · bookworm-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · bookworm; dsa · nss · debian · 12

[Debian 13 (Trixie)]

[libnss3]Unknown
Source package: [nss]
Details (4)
- 2:3.110-1+deb13u3 · amd64 · trixie
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u3 · arm64 · trixie
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u4 · amd64 · trixie-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u4 · arm64 · trixie-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
[libnss3-dev]Unknown
Source package: [nss]
Details (4)
- 2:3.110-1+deb13u3 · amd64 · trixie
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u3 · arm64 · trixie
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u4 · amd64 · trixie-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u4 · arm64 · trixie-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
[libnss3-tools]Unknown
Source package: [nss]
Details (4)
- 2:3.110-1+deb13u3 · amd64 · trixie
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u3 · arm64 · trixie
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u4 · amd64 · trixie-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13
- 2:3.110-1+deb13u4 · arm64 · trixie-security
  Fixed · Fixed: 2:3.45-1
  dsa · nss · debian · 13

Observed: Oct 23, 2026, 5:39:01 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]