NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade mozjs68Upgrade firefox-esrUpgrade librewolf | Aug 22, 2024 | Jul 9, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 9, 2020 |
| Centos_linux | — | Upgrade nss-debuginfoUpgrade nss-softokn-freeblUpgrade nss-sysinitUpgrade nspr-develUpgrade nss-softoknUpgrade nss-utilUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-toolsUpgrade nsprUpgrade nspr-debugsourceUpgrade nssUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-util-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-debugsourceUpgrade nspr-debuginfo | Nov 11, 2021 | Jul 9, 2020 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbirdUpgrade nss | Jun 5, 2020 | Jun 5, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Jul 28, 2020 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-softokn-freebl-devel | Dec 15, 2020 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nss-utilUpgrade nssUpgrade nss-softokn | Dec 1, 2020 | Jul 9, 2020 |
| Mfsa2020 20 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 77.0 | Jun 3, 2020 | Jun 2, 2020 |
| Mfsa2020 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 68.9 | Jun 3, 2020 | Jun 2, 2020 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 68.9 | Jun 5, 2020 | Jun 2, 2020 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 68.9.0-11.4.23.0.1.69.3 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.9.0-11.4.23.0.1.69.3 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 68.9.0-11.4.23.0.1.69.3 on Solaris 11.4Upgrade mail/thunderbird to version 68.9.0-11.4.23.0.1.69.3 on Solaris 11.4 | Jan 19, 2021 | Jul 9, 2020 |
| Redhat_linux | — | Upgrade nss-util-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-util-develUpgrade nsprUpgrade nss-softoknUpgrade nss-sysinitUpgrade nss-softokn-develNo solution existsUpgrade nspr-develUpgrade nss-utilUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-debuginfoUpgrade nss-toolsUpgrade nss-tools-debuginfoUpgrade nspr-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nspr-debugsourceUpgrade nss-softokn-debuginfoUpgrade nss-develUpgrade nss-debugsourceUpgrade nss-softokn-freebl-devel | Nov 11, 2021 | Jul 9, 2020 |
| Rocky_linux | — | Upgrade nsprUpgrade nspr-debuginfoUpgrade nspr-debugsourceUpgrade nspr-devel | Mar 12, 2024 | Jul 9, 2020 |
| Suse | — | Upgrade libfreebl3-hmac-32bitUpgrade mozilla-nss-develUpgrade libsoftokn3-hmac-32bitUpgrade libsoftokn3Upgrade libsoftokn3-hmacUpgrade libsoftokn3-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3-hmacUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade mozilla-nss-certsUpgrade libfreebl3Upgrade mozilla-nspr-develUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-sysinit | Jun 19, 2020 | Jun 4, 2020 |
| Ubuntu | — | Upgrade libnss3 (Ubuntu Pro)Upgrade thunderbirdUpgrade libnss3Upgrade firefox | Jun 5, 2020 | Jun 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub