Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nsprUpgrade nss-utilUpgrade nss-toolsUpgrade nss-develUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nspr-develUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-sysinitUpgrade nssUpgrade nss-softokn | Feb 15, 2024 | Dec 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-softokn-debuginfo | Feb 21, 2024 | Dec 19, 2023 |
| Amazon_linux_2023 | — | Upgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-debugsourceUpgrade nss-develUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-tools-debuginfoUpgrade nss-pkcs11-develUpgrade nspr-debuginfoUpgrade nss-softokn-freeblUpgrade nspr-develUpgrade nss-util-develUpgrade nsprUpgrade nss-utilUpgrade nss-toolsUpgrade nss-softokn-develUpgrade nss-util-debuginfoUpgrade nss-softoknUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nss | Feb 17, 2025 | Dec 19, 2023 |
| Debian | — | Upgrade nss | May 15, 2025 | Dec 19, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Jan 8, 2024 | Dec 19, 2023 |
| Mfsa2023 56 | — | Upgrade to Mozilla Firefox version 121.0Upgrade to the latest version of Mozilla Firefox | Dec 20, 2023 | Dec 19, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade nss-softoknUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nsprUpgrade nss-util-develUpgrade nssUpgrade nss-sysinitUpgrade nss-tools | Feb 14, 2024 | Dec 19, 2023 |
| Redhat_linux | — | No solution existsUpgrade firefox-x11Upgrade nss-softokn-debuginfoUpgrade nss-develUpgrade nss-debugsourceUpgrade nss-sysinitUpgrade nss-util-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-sysinit-debuginfoUpgrade nssUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade nss-utilUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nsprUpgrade firefoxUpgrade nss-toolsUpgrade nss-softoknUpgrade nss-debuginfoUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-tools-debuginfoUpgrade nspr-devel | Feb 13, 2024 | Dec 19, 2023 |
| Rocky_linux | — | Upgrade nss-softokn-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-develUpgrade nss-debugsourceUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-util-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nssUpgrade nss-softokn-develUpgrade nss-utilUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-debuginfoUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-softokn-freebl | Mar 13, 2024 | Dec 19, 2023 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Jan 3, 2024 | Dec 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub