CVE-2019-17006: 
Rocky Linux vulnerability analysis and mitigation

CVE-2019-17006 affects Network Security Services (NSS) versions before 3.46. The vulnerability was discovered when several cryptographic primitives were found to have missing length checks. The issue was disclosed in December 2019 and affects systems using NSS for cryptographic operations (NVD, Ubuntu).

The vulnerability exists due to missing length checks in several cryptographic primitives within NSS. In cases where the application calling the library did not perform sanity checks on the inputs, it could result in a buffer overflow crash. The vulnerability has a CVSS v3.1 base score of 9.8 (Critical) with the vector string AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (CISA).

Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data, or cause a Denial of Service (DoS) condition through buffer overflow crashes (NetApp).

The vulnerability is remotely exploitable and requires low skill level to exploit. It affects applications that use NSS for cryptographic operations and don't perform proper input validation. The issue was fixed in NSS version 3.46 (Mozilla).

The primary mitigation is to update NSS to version 3.46 or later which includes fixes for the missing length checks. For systems that cannot be immediately updated, it's recommended to implement proper input validation at the application level and restrict network access to affected systems (CISA).