The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-softokn-develUpgrade nss-toolsUpgrade nss-utilUpgrade nss-sysinitUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nsprUpgrade nss-develUpgrade nspr-develUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-util-devel | Dec 1, 2016 | Feb 8, 2013 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Feb 8, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 17, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Oct 30, 2017 | Feb 8, 2013 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade library/security/nss to version 4.14.3-0.175.1.20.0.3.0 on Solaris 11.1 | May 29, 2017 | Feb 8, 2013 |
| Oracle_linux | — | Upgrade nss-softokn-develUpgrade nss-softoknUpgrade nsprUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-utilUpgrade nspr-develUpgrade nss-toolsUpgrade nss-develUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-devel | Oct 16, 2024 | Feb 8, 2013 |
| Suse | — | Upgrade xulrunner-debugsourceUpgrade MozillaFirefox-translations-otherUpgrade mozilla-js-x86Upgrade xulrunner-develUpgrade mozilla-js-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-develUpgrade mozilla-nss-x86Upgrade xulrunner-debuginfo-32bitUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozilla-nss-32bitUpgrade xulrunner-debuginfoUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade MozillaThunderbird-devel-debuginfoUpgrade mozilla-nss-tools-debuginfoUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-debugsourceUpgrade MozillaThunderbird-translations-otherUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-js-debuginfo-x86Upgrade MozillaFirefox-debuginfoUpgrade enigmailUpgrade mozilla-nss-debugsourceUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nspr-debugsourceUpgrade mozilla-nss-sysinitUpgrade libfreebl3-debuginfoUpgrade mozilla-jsUpgrade mozilla-nspr-develUpgrade libsoftokn3Upgrade libfreebl3-x86Upgrade mozilla-js-debuginfoUpgrade seamonkey-ircUpgrade mozilla-nss-sysinit-x86Upgrade MozillaThunderbird-develUpgrade mozilla-nspr-debuginfoUpgrade MozillaThunderbird-debugsourceUpgrade MozillaFirefox-translations-commonUpgrade enigmail-debuginfoUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-debuginfo-32bitUpgrade seamonkey-translations-otherUpgrade mozilla-nss-certs-x86Upgrade MozillaFirefox-develUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-nss-toolsUpgrade xulrunner-debuginfo-x86Upgrade mozilla-nss-certs-debuginfo-x86Upgrade mozilla-nss-sysinit-debuginfoUpgrade libsoftokn3-debuginfo-x86Upgrade xulrunnerUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-debuginfo-x86Upgrade libfreebl3-32bitUpgrade xulrunner-32bitUpgrade MozillaThunderbird-debuginfoUpgrade libsoftokn3-x86Upgrade mozilla-nspr-debuginfo-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-sysinit-32bitUpgrade libsoftokn3-debuginfoUpgrade mozilla-nspr-debuginfo-x86Upgrade MozillaThunderbirdUpgrade seamonkeyUpgrade libfreebl3Upgrade mozilla-nspr-x86Upgrade mozilla-nspr-32bitUpgrade seamonkey-translations-commonUpgrade seamonkey-venkmanUpgrade libfreebl3-debuginfo-x86Upgrade seamonkey-dom-inspectorUpgrade mozilla-nss-certsUpgrade mozilla-nss-debuginfoUpgrade libfreebl3-debuginfo-32bitUpgrade xulrunner-buildsymbolsUpgrade mozilla-nssUpgrade mozilla-nss-certs-debuginfoUpgrade xulrunner-devel-debuginfoUpgrade MozillaThunderbird-buildsymbolsUpgrade seamonkey-debugsourceUpgrade seamonkey-debuginfoUpgrade libsoftokn3-debuginfo-32bitUpgrade xulrunner-x86 | Feb 17, 2015 | Feb 8, 2013 |
| Ubuntu | — | Upgrade libnss3Upgrade libnss3-1d | Nov 8, 2024 | Feb 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub