After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Firefox < 72.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nspr-develUpgrade nspr | May 4, 2022 | Jan 8, 2020 |
| Alpine Linux | — | Upgrade nssUpgrade librewolfUpgrade firefox | Aug 22, 2024 | Jan 8, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nss-util-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nssUpgrade nss-toolsUpgrade nspr-develUpgrade nspr-debuginfoUpgrade nss-pkcs11-develUpgrade nss-softokn-freeblUpgrade nss-debuginfoUpgrade nss-utilUpgrade nss-develUpgrade nss-util-develUpgrade nsprUpgrade nss-softokn-freebl-devel | Nov 12, 2020 | Jan 8, 2020 |
| Amazon_linux | — | Upgrade nss-softoknUpgrade nsprUpgrade nss-util | Jul 13, 2021 | Jan 8, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 8, 2020 |
| Centos_linux | — | Upgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nspr-debuginfoUpgrade nss-debugsourceUpgrade nss-develUpgrade nss-sysinit-debuginfoUpgrade nss-softoknUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-develUpgrade nspr-debugsourceUpgrade nss-tools-debuginfoUpgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nss-util-debuginfoUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-utilUpgrade nsprUpgrade nssUpgrade nss-softokn-debuginfo | Aug 4, 2020 | Jan 8, 2020 |
| Debian | — | Upgrade nss | Jul 21, 2020 | Jan 8, 2020 |
| Mfsa2020 01 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 72.0 | Jan 8, 2020 | Jan 7, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jan 8, 2020 |
| Oracle_linux | — | Upgrade nsprUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-develUpgrade nss-utilUpgrade nss-sysinitUpgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nspr-devel | Aug 5, 2020 | Jan 8, 2020 |
| Redhat_linux | — | Upgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-sysinitUpgrade nspr-debugsourceNo solution existsUpgrade nss-develUpgrade nss-tools-debuginfoUpgrade nss-util-debuginfoUpgrade nss-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-toolsUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nsprUpgrade nspr-develUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-util-develUpgrade nss-debugsourceUpgrade nss-pkcs11-develUpgrade nssUpgrade nspr-debuginfoUpgrade nss-softokn-freebl | Aug 4, 2020 | Jan 8, 2020 |
| Rocky_linux | — | Upgrade nspr-debugsourceUpgrade nspr-debuginfoUpgrade nsprUpgrade nspr-devel | Mar 12, 2024 | Jan 8, 2020 |
| Ubuntu | — | Upgrade libnss3Upgrade firefox | Jan 10, 2020 | Jan 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub