CVE-2016-8635

Name of the Vulnerable Software and Affected Versions NSS versions 3.21.x

Description A flaw was found in the Diffie Hellman Client key exchange handling, making it vulnerable to a small subgroup confinement attack. This allows an attacker to recover private keys by confining the client DH key to a small subgroup of the desired group.

Recommendations For NSS versions 3.21.x, consider updating to a newer version that addresses this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.