After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Firefox < 72.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nsprUpgrade nspr-devel | May 4, 2022 | Jan 8, 2020 |
| Alpine Linux | — | Upgrade firefoxUpgrade librewolfUpgrade nss | Aug 22, 2024 | Jan 8, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-utilUpgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nspr-debuginfoUpgrade nss-develUpgrade nsprUpgrade nss-util-debuginfoUpgrade nssUpgrade nss-sysinitUpgrade nss-softokn-develUpgrade nss-softokn-debuginfoUpgrade nss-softoknUpgrade nspr-develUpgrade nss-tools | Nov 12, 2020 | Jan 8, 2020 |
| Amazon_linux | — | Upgrade nss-utilUpgrade nss-softoknUpgrade nspr | Jul 13, 2021 | Jan 8, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 8, 2020 |
| Centos_linux | — | Upgrade nss-utilUpgrade nsprUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-util-debuginfoUpgrade nssUpgrade nss-sysinitUpgrade nss-softoknUpgrade nspr-debugsourceUpgrade nss-tools-debuginfoUpgrade nss-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-softokn-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-debugsourceUpgrade nss-util-develUpgrade nspr-develUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nspr-debuginfo | Aug 4, 2020 | Jan 8, 2020 |
| Debian | — | Upgrade nss | Jul 21, 2020 | Jan 8, 2020 |
| Mfsa2020 01 | — | Upgrade to Mozilla Firefox version 72.0Upgrade to the latest version of Mozilla Firefox | Jan 8, 2020 | Jan 7, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jan 8, 2020 |
| Oracle_linux | — | Upgrade nss-softokn-freeblUpgrade nsprUpgrade nss-develUpgrade nss-utilUpgrade nssUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade nss-softoknUpgrade nss-softokn-freebl-develUpgrade nss-sysinitUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nspr-devel | Aug 5, 2020 | Jan 8, 2020 |
| Redhat_linux | — | No solution existsUpgrade nss-toolsUpgrade nspr-debugsourceUpgrade nss-softokn-freebl-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nss-develUpgrade nss-sysinit-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-debuginfoUpgrade nss-softokn-freeblUpgrade nspr-develUpgrade nspr-debuginfoUpgrade nss-util-develUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-debugsourceUpgrade nss-utilUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nss-pkcs11-develUpgrade nss | Aug 4, 2020 | Jan 8, 2020 |
| Rocky_linux | — | Upgrade nspr-develUpgrade nsprUpgrade nspr-debuginfoUpgrade nspr-debugsource | Mar 12, 2024 | Jan 8, 2020 |
| Ubuntu | — | Upgrade libnss3Upgrade firefox | Jan 10, 2020 | Jan 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub