CVE:CVE-2016-8635
CNNVD:CNNVD-201611-544
Mozilla Network Security Services（NSS）是美国Mozilla基金会开发的一个函数库（网络安全服务库），它可跨平台提供SSL、S/MIME和其他Internet安全标准支持。
Mozilla NSS 3.21.x版本中对Diffie Hellman Client密钥更改的处理存在信息泄露漏洞。攻击者可利用该漏洞恢复私钥。
solution:Upgrade mozilla network_security_services to a higher version than 3.21.4,and avoid the version [3.21,3.21.4]; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,and avoid the version 7.3,7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.3,7.4,7.5,7.6,and avoid the version 7.3,7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,and avoid the version 7.3,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0