CVE catalog

CVE-2020-12403

nss: CVE-2020-12403

[CVE catalog]

Severity
Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.54% · Oct 25, 2026

A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannsssid2:3.131.1-1fixed
Debiannssforky2:3.131.1-1fixed
Debiannsstrixie2:3.110-1+deb13u4fixed
Debiannsstrixie-security2:3.110-1+deb13u4fixed
Debiannssbookworm2:3.87.1-1+deb12u2fixed
Debiannssbookworm-security2:3.87.1-1+deb12u4fixed
Alpinenss3.123.55-r0fixed
Alpinenss3.193.55-r0fixed
Alpinenss3.203.55-r0fixed
Alpinenss3.213.55-r0fixed
Alpinenss3.223.55-r0fixed
Alpinenss3.233.55-r0fixed
Alpinenss3.243.55-r0fixed
Ubuntunsspro2:3.15.1-1ubuntu1vulnerable
Ubuntunsspro2:3.15.2-1vulnerable
Ubuntunsspro2:3.15.3-1vulnerable
Ubuntunsspro2:3.15.3.1-1vulnerable
Ubuntunsspro2:3.15.3.1-1.1vulnerable
Ubuntunsspro2:3.15.3.1-1.1ubuntu1vulnerable
Ubuntunsspro2:3.15.4-1ubuntu3vulnerable
Ubuntunsspro2:3.15.4-1ubuntu4vulnerable
Ubuntunsspro2:3.15.4-1ubuntu5vulnerable
Ubuntunsspro2:3.15.4-1ubuntu6vulnerable
Ubuntunsspro2:3.15.4-1ubuntu7vulnerable
Ubuntunsspro2:3.15.4-1ubuntu7.1vulnerable
Ubuntunsspro2:3.17-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.17.1-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.17.1-0ubuntu0.14.04.2vulnerable
Ubuntunsspro2:3.17.4-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.19.2-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.19.2.1-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.19.2.1-0ubuntu0.14.04.2vulnerable
Ubuntunsspro2:3.21-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.21-0ubuntu0.14.04.2vulnerable
Ubuntunsspro2:3.23-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.26.2-0ubuntu0.14.04.3vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.2vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.3vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.4vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm1vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm2vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm3vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm4vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm5vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm6vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm7vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm8fixed
Ubuntunss16.042:3.19.2-1ubuntu1vulnerable
Ubuntunss16.042:3.19.2.1-0ubuntu1vulnerable
Ubuntunss16.042:3.21-1ubuntu2vulnerable
Ubuntunss16.042:3.21-1ubuntu3vulnerable
Ubuntunss16.042:3.21-1ubuntu4vulnerable
Ubuntunss16.042:3.23-0ubuntu0.16.04.1vulnerable
Ubuntunss16.042:3.26.2-0ubuntu0.16.04.2vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.1vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.2vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.3vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.4vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.5vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.6vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.8vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.9vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.10vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.11vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.12vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.13vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.14fixed
Ubuntunss18.042:3.32-1ubuntu3vulnerable
Ubuntunss18.042:3.34-1ubuntu1vulnerable
Ubuntunss18.042:3.35-2ubuntu2vulnerable
Ubuntunss18.042:3.35-2ubuntu2.1vulnerable
Ubuntunss18.042:3.35-2ubuntu2.2vulnerable
Ubuntunss18.042:3.35-2ubuntu2.3vulnerable
Ubuntunss18.042:3.35-2ubuntu2.5vulnerable
Ubuntunss18.042:3.35-2ubuntu2.6vulnerable
Ubuntunss18.042:3.35-2ubuntu2.7vulnerable
Ubuntunss18.042:3.35-2ubuntu2.8vulnerable
Ubuntunss18.042:3.35-2ubuntu2.9vulnerable
Ubuntunss18.042:3.35-2ubuntu2.11vulnerable
Ubuntunss18.042:3.35-2ubuntu2.12fixed
Ubuntunss20.042:3.45-1ubuntu2vulnerable
Ubuntunss20.042:3.47-1ubuntu1vulnerable
Ubuntunss20.042:3.47-1ubuntu2vulnerable
Ubuntunss20.042:3.48-1ubuntu1vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1.1vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1.2vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1.4vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1.5fixed
Ubuntunsspro2:3.15.1-1ubuntu1vulnerable
Ubuntunsspro2:3.15.2-1vulnerable
Ubuntunsspro2:3.15.3-1vulnerable
Ubuntunsspro2:3.15.3.1-1vulnerable
Ubuntunsspro2:3.15.3.1-1.1vulnerable
Ubuntunsspro2:3.15.3.1-1.1ubuntu1vulnerable
Ubuntunsspro2:3.15.4-1ubuntu3vulnerable
Ubuntunsspro2:3.15.4-1ubuntu4vulnerable
Ubuntunsspro2:3.15.4-1ubuntu5vulnerable
Ubuntunsspro2:3.15.4-1ubuntu6vulnerable
Ubuntunsspro2:3.15.4-1ubuntu7vulnerable
Ubuntunsspro2:3.15.4-1ubuntu7.1vulnerable
Ubuntunsspro2:3.17-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.17.1-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.17.1-0ubuntu0.14.04.2vulnerable
Ubuntunsspro2:3.17.4-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.19.2-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.19.2.1-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.19.2.1-0ubuntu0.14.04.2vulnerable
Ubuntunsspro2:3.21-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.21-0ubuntu0.14.04.2vulnerable
Ubuntunsspro2:3.23-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.26.2-0ubuntu0.14.04.3vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.1vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.2vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.3vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.4vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm1vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm2vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm3vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm4vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm5vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm6vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm7vulnerable
Ubuntunsspro2:3.28.4-0ubuntu0.14.04.5+esm8fixed
Ubuntunss16.042:3.19.2-1ubuntu1vulnerable
Ubuntunss16.042:3.19.2.1-0ubuntu1vulnerable
Ubuntunss16.042:3.21-1ubuntu2vulnerable
Ubuntunss16.042:3.21-1ubuntu3vulnerable
Ubuntunss16.042:3.21-1ubuntu4vulnerable
Ubuntunss16.042:3.23-0ubuntu0.16.04.1vulnerable
Ubuntunss16.042:3.26.2-0ubuntu0.16.04.2vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.1vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.2vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.3vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.4vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.5vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.6vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.8vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.9vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.10vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.11vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.12vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.13vulnerable
Ubuntunss16.042:3.28.4-0ubuntu0.16.04.14fixed
Ubuntunss18.042:3.32-1ubuntu3vulnerable
Ubuntunss18.042:3.34-1ubuntu1vulnerable
Ubuntunss18.042:3.35-2ubuntu2vulnerable
Ubuntunss18.042:3.35-2ubuntu2.1vulnerable
Ubuntunss18.042:3.35-2ubuntu2.2vulnerable
Ubuntunss18.042:3.35-2ubuntu2.3vulnerable
Ubuntunss18.042:3.35-2ubuntu2.5vulnerable
Ubuntunss18.042:3.35-2ubuntu2.6vulnerable
Ubuntunss18.042:3.35-2ubuntu2.7vulnerable
Ubuntunss18.042:3.35-2ubuntu2.8vulnerable
Ubuntunss18.042:3.35-2ubuntu2.9vulnerable
Ubuntunss18.042:3.35-2ubuntu2.11vulnerable
Ubuntunss18.042:3.35-2ubuntu2.12fixed
Ubuntunss20.042:3.45-1ubuntu2vulnerable
Ubuntunss20.042:3.47-1ubuntu1vulnerable
Ubuntunss20.042:3.47-1ubuntu2vulnerable
Ubuntunss20.042:3.48-1ubuntu1vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1.1vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1.2vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1.4vulnerable
Ubuntunss20.042:3.49.1-1ubuntu1.5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannsssourcesid2:3.55-1not yet assignedNot reportedNot reported
Debiannsssourceforky2:3.55-1not yet assignedNot reportedNot reported
Debiannsssourcetrixie2:3.55-1not yet assignedNot reportedNot reported
Debiannsssourcebookworm2:3.55-1not yet assignedNot reportedNot reported
Alpinenssapk3.123.55-r0Not reportedALPINE-CVE-2020-12403Not reported
Alpinenssapk3.193.55-r0Not reportedALPINE-CVE-2020-12403Not reported
Alpinenssapk3.203.55-r0Not reportedALPINE-CVE-2020-12403Not reported
Alpinenssapk3.213.55-r0Not reportedALPINE-CVE-2020-12403Not reported
Alpinenssapk3.223.55-r0Not reportedALPINE-CVE-2020-12403Not reported
Alpinenssapk3.233.55-r0Not reportedALPINE-CVE-2020-12403Not reported
Alpinenssapk3.243.55-r0Not reportedALPINE-CVE-2020-12403Not reported
Ubuntunssdebpro2:3.28.4-0ubuntu0.14.04.5+esm8Not reportedUSN-4476-1Not reported
Ubuntunssdeb16.042:3.28.4-0ubuntu0.16.04.14Not reportedUSN-4476-1Not reported
Ubuntunssdeb18.042:3.35-2ubuntu2.12Not reportedUSN-4476-1Not reported
Ubuntunssdeb20.042:3.49.1-1ubuntu1.5Not reportedUSN-4476-1Not reported
Ubuntunssdebpro2:3.28.4-0ubuntu0.14.04.5+esm8Not reportedUBUNTU-CVE-2020-12403Not reported
Ubuntunssdeb16.042:3.28.4-0ubuntu0.16.04.14Not reportedUBUNTU-CVE-2020-12403Not reported
Ubuntunssdeb18.042:3.35-2ubuntu2.12Not reportedUBUNTU-CVE-2020-12403Not reported
Ubuntunssdeb20.042:3.49.1-1ubuntu1.5Not reportedUBUNTU-CVE-2020-12403Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libnss3]Unknown

    Source package: [nss]

    Details (4)
    • 2:3.87.1-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

  • [libnss3-dev]Unknown

    Source package: [nss]

    Details (4)
    • 2:3.87.1-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

  • [libnss3-tools]Unknown

    Source package: [nss]

    Details (4)
    • 2:3.87.1-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

    • 2:3.87.1-1+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · bookworm; dsa · nss · debian · 12

[Debian 13 (Trixie)]

  • [libnss3]Unknown

    Source package: [nss]

    Details (4)
    • 2:3.110-1+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u4 · arm64 · trixie-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

  • [libnss3-dev]Unknown

    Source package: [nss]

    Details (4)
    • 2:3.110-1+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u4 · arm64 · trixie-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

  • [libnss3-tools]Unknown

    Source package: [nss]

    Details (4)
    • 2:3.110-1+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

    • 2:3.110-1+deb13u4 · arm64 · trixie-security

      Fixed · Fixed: 2:3.55-1

      dsa · nss · debian · 13

Observed:

References