Diffie Hellman Key Exchange Vulnerability in NSS by Red Hat

CVE-2016-8635

Summary

A vulnerability in the Diffie Hellman key exchange implementation of NSS 3.21.x allows attackers to exploit small subgroup confinement. By targeting the client DH key, an attacker can potentially recover private keys, undermining the security of encrypted communications. This issue highlights the importance of robust implementations of cryptographic protocols to prevent unauthorized access and data breaches.

References