CVE-2018-12384

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.

Metrics

CVSS 3.0 5.9/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-335

Affected software

No affected versions have been published.

Timeline

Published: Apr 29, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-123857.0A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile CVE-2018-123868.1A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to rem CVE-2018-123879.1A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer bei CVE-2018-123888.8Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory cor CVE-2018-123898.8Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memo CVE-2018-12397.2Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities. CVE-2018-123909.8Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed e CVE-2018-123918.8During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Becaus CVE-2018-123929.8When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable c CVE-2018-123937.5A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 repres CVE-2018-123957.5By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This CVE-2018-123966.5A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for po