漏洞信息详情
Amazon Linux AMI 加密问题漏洞
漏洞简介
Amazon Linux AMI是一个应用软件。由 Amazon Web Services 提供的受支持和维护的 Linux 映像,用于 Amazon Elastic Compute Cloud (Amazon EC2)。
Amazon Linux AMI 中的RSA密钥生成方式存在加密问题漏洞。攻击者可利用该漏洞绕过访问限制,获取敏感信息。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes
https://www.mozilla.org/en-US/security/advisories/mfsa2020-24/
参考网址
来源:DEBIAN
链接:https://www.debian.org/security/2020/dsa-4726
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/UWVDJRARXNWWWTCGMM63EXLQHH2LNOXO/
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00016.html
来源:GENTOO
链接:https://security.gentoo.org/glsa/202007-10
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00018.html
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html
来源:MISC
链接:https://bugzilla.mozilla.org/show_bug.cgi?id=1631597
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/RFL6UNFK4MG2WDXLMLFAEIUSM5EUK7CG/
来源:UBUNTU
链接:https://usn.ubuntu.com/4417-1/
来源:MISC
链接:https://www.mozilla.org/security/advisories/mfsa2020-24/
来源:UBUNTU
链接:https://usn.ubuntu.com/4417-2/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3535/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159396/Red-Hat-Security-Advisory-2020-4076-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158571/Gentoo-Linux-Security-Advisory-202007-10.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2394/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.1207
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Mozilla-NSS-information-disclosure-via-MPI-Modular-Inversion-32574
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/161727/Red-Hat-Security-Advisory-2021-0778-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158326/Ubuntu-Security-Notice-USN-4417-2.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3355/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.1193
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159497/Red-Hat-Security-Advisory-2020-4201-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0986
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2250/
来源:www.cybersecurity-help.cz
链接:https://www.cybersecurity-help.cz/vdb/SB2021071301
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2278/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158724/Red-Hat-Security-Advisory-2020-3280-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2650/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2442/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0845
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2020-12402
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2446/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.1301
来源:www.cybersecurity-help.cz
链接:https://www.cybersecurity-help.cz/vdb/SB2021043017
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/161916/Red-Hat-Security-Advisory-2021-0949-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/162142/Red-Hat-Security-Advisory-2021-1079-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3461/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3631/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/162130/Red-Hat-Security-Advisory-2021-1129-01.html
受影响实体
暂无
补丁
- Mozilla Firefox 加密问题漏洞的修复措施<!--2020-6-18-->
还没有评论,来说两句吧...