CVE:CVE-2020-25648
CNNVD:CNNVD-202010-904
NSS是美国Mozilla基金会的一个底层密码学库。该库支持多种加密算法，并且 Firefox 浏览器的TLS实现基于该库。
NSS 3.58之前的版本存在安全漏洞，该漏洞源于NSS处理CCS (ChangeCipherSpec)消息的方式发现了一个缺陷。这个缺陷允许远程攻击者可利用该漏洞发送多个CCS消息，导致用NSS库编译的服务器被拒绝服务。
solution:Upgrade mozilla network_security_services to a higher version than 3.58,and avoid the version (,3.58); Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 31,32,33,and avoid the version 31,32,33; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.6.0,and avoid the version (,9.2.6.0)