VULNERABILITY INTELLIGENCE

CVE-2016-8635

CVSS score5.3 MEDIUM
EPSS probability1.99%
CISA KEVNot currently listed
Published2018-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.

Weakness classification

  • CWE-358: Improperly Implemented Security Check for Standard

Primary references