During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nspr-develUpgrade nspr | May 4, 2022 | Jul 9, 2020 |
| Alpine Linux | — | Upgrade firefoxUpgrade librewolfUpgrade nss | Aug 22, 2024 | Jul 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nss-develUpgrade nss-util-debuginfoUpgrade nspr-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-debuginfoUpgrade nss-pkcs11-develUpgrade nss-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-toolsUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nspr-develUpgrade nss-util-develUpgrade nss-softokn-freeblUpgrade nssUpgrade nsprUpgrade nss-util | Nov 12, 2020 | Jul 9, 2020 |
| Amazon_linux | — | Upgrade nsprUpgrade nss-utilUpgrade nss-softokn | Jul 13, 2021 | Jul 3, 2020 |
| Centos_linux | — | Upgrade nsprUpgrade nss-utilUpgrade nss-toolsUpgrade nss-softokn-freeblUpgrade nss-softokn-debuginfoUpgrade nss-develUpgrade nss-softokn-freebl-debuginfoUpgrade nssUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade nss-softokn-develUpgrade nss-debuginfoUpgrade nspr-debugsourceUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-softokn-freebl-develUpgrade nss-debugsourceUpgrade nspr-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-util-debuginfoUpgrade nss-sysinit | Aug 4, 2020 | Jul 9, 2020 |
| Debian | — | Upgrade nss | Jul 2, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jul 28, 2020 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nss-softokn-freebl-develUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-softokn | Feb 2, 2021 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nss-softoknUpgrade nss-utilUpgrade nss | Jun 2, 2021 | Jul 9, 2020 |
| Mfsa2020 24 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 78.0 | Jul 2, 2020 | Jun 30, 2020 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 78.0 | Jul 17, 2020 | Jul 9, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jul 9, 2020 |
| Oracle_linux | — | Upgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nsprUpgrade nspr-develUpgrade nss-util-develUpgrade nss-toolsUpgrade nssUpgrade nss-sysinitUpgrade nss-softokn | Aug 5, 2020 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade nspr-debuginfoUpgrade nss-pkcs11-develUpgrade nssUpgrade nss-develUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-util-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-util-develUpgrade nss-debugsourceUpgrade nss-sysinitNo solution existsUpgrade nss-softokn-freeblUpgrade nss-debuginfoUpgrade nspr-debugsourceUpgrade nss-toolsUpgrade nss-softokn-freebl-debuginfoUpgrade nspr-develUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nspr | Aug 4, 2020 | Jul 9, 2020 |
| Rocky_linux | — | Upgrade nspr-develUpgrade nsprUpgrade nspr-debuginfoUpgrade nspr-debugsource | Mar 12, 2024 | Jul 9, 2020 |
| Suse | — | Upgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3-hmac-32bitUpgrade libfreebl3-hmacUpgrade libsoftokn3-hmacUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade libsoftokn3Upgrade libsoftokn3-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-sysinitUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-develUpgrade mozilla-nss-toolsUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3Upgrade mozillafirefox-branding-sleUpgrade mozilla-nssUpgrade mozilla-nss-certsUpgrade mozilla-nss-develUpgrade mozilla-nspr-develUpgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr | Jul 4, 2020 | Jul 3, 2020 |
| Ubuntu | — | Upgrade libnss3 (Ubuntu Pro)Upgrade libnss3 | Aug 5, 2020 | Jul 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub