Oracle Linux 7 NSS Cryptographic Module
Oracle Corporation - FIPS 140 #4586
Oracle Linux is a set of cryptographic libraries, services, and user level cryptographic applications that are validated at FIPS 140-2 level 1, providing a secure foundation for vendor use in developing dependent services, applications, and even purpose built appliances that may be FIPS 140-2 validated.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4586
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Oracle Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- Acumen Security
- First validated
- September 6, 2023
- Versions
- R7-4.0.0
- Caveat
- When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy.
Algorithms
- AES
- DRBG
- DSA
- ECDSA
- HMAC
- KTS
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2016-3427CRITICAL 9.8KEVEPSS 92.3%
- CVE-2015-5287HIGH 7.8KEVEPSS 5.0%
- CVE-2016-3718MEDIUM 5.5KEVEPSS 75.6%
- CVE-2016-3715MEDIUM 5.5KEVEPSS 75.3%
- CVE-2016-5254CRITICAL 9.8EPSS 3.0%
- CVE-2016-5118CRITICAL 9.8EPSS 50.0%
- CVE-2016-2182CRITICAL 9.8EPSS 46.1%
- CVE-2016-2177CRITICAL 9.8EPSS 44.5%
- CVE-2016-1962CRITICAL 9.8EPSS 6.1%
- CVE-2016-1930CRITICAL 9.8EPSS 6.0%
- CVE-2016-1908CRITICAL 9.8EPSS 13.7%
- CVE-2015-8668CRITICAL 9.8EPSS 13.7%
- CVE-2015-8391CRITICAL 9.8EPSS 6.4%
- CVE-2015-8386CRITICAL 9.8EPSS 6.9%
- CVE-2016-3610CRITICAL 9.6EPSS 5.9%
- CVE-2016-3598CRITICAL 9.6EPSS 6.7%
- CVE-2016-3587CRITICAL 9.6EPSS 5.9%
- CVE-2016-5264HIGH 8.8EPSS 3.2%
- CVE-2016-5263HIGH 8.8EPSS 2.3%
- CVE-2016-5259HIGH 8.8EPSS 3.3%
- CVE-2016-5258HIGH 8.8EPSS 3.3%
- CVE-2016-5252HIGH 8.8EPSS 3.1%
- CVE-2016-4051HIGH 8.8EPSS 18.3%
- CVE-2016-3710HIGH 8.8EPSS 0.9%
- CVE-2016-2802HIGH 8.8EPSS 2.3%
- CVE-2016-2801HIGH 8.8EPSS 2.3%
- CVE-2016-2800HIGH 8.8EPSS 2.3%
- CVE-2016-2799HIGH 8.8EPSS 4.9%
- CVE-2016-2798HIGH 8.8EPSS 2.3%
- CVE-2016-2797HIGH 8.8EPSS 2.7%
- CVE-2016-2796HIGH 8.8EPSS 3.9%
- CVE-2016-2795HIGH 8.8EPSS 2.3%
- CVE-2016-2794HIGH 8.8EPSS 3.5%
- CVE-2016-2793HIGH 8.8EPSS 2.7%
- CVE-2016-2792HIGH 8.8EPSS 2.3%
- CVE-2016-2791HIGH 8.8EPSS 2.3%
- CVE-2016-2790HIGH 8.8EPSS 2.3%
- CVE-2016-1977HIGH 8.8EPSS 2.9%
- CVE-2016-1974HIGH 8.8EPSS 3.0%
- CVE-2016-1973HIGH 8.8EPSS 3.0%
- CVE-2016-1966HIGH 8.8EPSS 2.9%
- CVE-2016-1964HIGH 8.8EPSS 2.8%
- CVE-2016-1961HIGH 8.8EPSS 2.9%
- CVE-2016-1960HIGH 8.8EPSS 30.9%
- CVE-2016-1954HIGH 8.8EPSS 2.3%
- CVE-2016-1952HIGH 8.8EPSS 3.0%
- CVE-2016-1950HIGH 8.8EPSS 4.2%
- CVE-2016-1935HIGH 8.8EPSS 5.1%
- CVE-2016-6250HIGH 8.6EPSS 6.3%
- CVE-2016-4554HIGH 8.6EPSS 38.9%
and 133 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain