CVE-2016-8635

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.

Metrics

CVSS 3.0 5.9/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-358 CWE-320

Affected software

Vendor	Product	Versions
Mozilla	nss	3.21.x

References

http://rhn.redhat.com/errata/RHSA-2016-2779.htmlThird Party Advisory
http://www.securityfocus.com/bid/94346Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8635Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/201701-46Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2779.htmlThird Party Advisory
http://www.securityfocus.com/bid/94346Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8635Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/201701-46Third Party Advisory

Timeline

Published: Aug 1, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-86367.8Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users CVE-2016-86377.8A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'e CVE-2016-86389.1A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log CVE-2016-86395.4It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker wit CVE-2016-86409.1A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table CVE-2016-86417.8A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely ch CVE-2016-86425.3In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.CVE-2016-86434.3In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.CVE-2016-86445.3In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.CVE-2016-86455.5The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system cra CVE-2016-86465.5The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by a CVE-2016-86474.9An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in