NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade librewolfUpgrade firefox-esrUpgrade mozjs68Upgrade firefoxUpgrade thunderbird | Aug 22, 2024 | Jul 9, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 9, 2020 |
| Centos_linux | — | Upgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-sysinit-debuginfoUpgrade nspr-debugsourceUpgrade nssUpgrade nss-debugsourceUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-util-develUpgrade nss-toolsUpgrade nspr-develUpgrade nss-debuginfoUpgrade nss-softoknUpgrade nss-utilUpgrade nsprUpgrade nss-softokn-develUpgrade nss-sysinitUpgrade nss-softokn-freebl | Nov 11, 2021 | Jul 9, 2020 |
| Debian | — | Upgrade firefox-esrUpgrade nssUpgrade thunderbird | Jun 5, 2020 | Jun 5, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Jul 28, 2020 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nss-softokn-freebl-devel | Dec 15, 2020 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nss-utilUpgrade nss-softoknUpgrade nss | Dec 1, 2020 | Jul 9, 2020 |
| Mfsa2020 20 | — | Upgrade to Mozilla Firefox version 77.0Upgrade to the latest version of Mozilla Firefox | Jun 3, 2020 | Jun 2, 2020 |
| Mfsa2020 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 68.9 | Jun 3, 2020 | Jun 2, 2020 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 68.9 | Jun 5, 2020 | Jun 2, 2020 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 68.9.0-11.4.23.0.1.69.3 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 68.9.0-11.4.23.0.1.69.3 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.9.0-11.4.23.0.1.69.3 on Solaris 11.4Upgrade web/browser/firefox to version 68.9.0-11.4.23.0.1.69.3 on Solaris 11.4 | Jan 19, 2021 | Jul 9, 2020 |
| Redhat_linux | — | Upgrade nss-debugsourceUpgrade nspr-debugsourceUpgrade nspr-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-softokn-debuginfoUpgrade nss-sysinitUpgrade nss-tools-debuginfoUpgrade nss-utilUpgrade nss-softokn-freebl-debuginfoNo solution existsUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-debuginfoUpgrade nssUpgrade nsprUpgrade nspr-develUpgrade nss-toolsUpgrade nss-util-debuginfoUpgrade nss-util-devel | Nov 11, 2021 | Jul 9, 2020 |
| Rocky_linux | — | Upgrade nspr-debugsourceUpgrade nsprUpgrade nspr-debuginfoUpgrade nspr-devel | Mar 12, 2024 | Jul 9, 2020 |
| Suse | — | Upgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-toolsUpgrade libsoftokn3Upgrade mozilla-nss-develUpgrade libsoftokn3-32bitUpgrade libsoftokn3-hmacUpgrade mozilla-nss-32bitUpgrade libfreebl3-hmac-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-sysinitUpgrade libfreebl3-hmacUpgrade libfreebl3Upgrade mozilla-nssUpgrade mozilla-nss-certsUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nsprUpgrade mozilla-nspr-develUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3-32bit | Jun 19, 2020 | Jun 4, 2020 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade libnss3Upgrade libnss3 (Ubuntu Pro) | Jun 5, 2020 | Jun 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub