During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nsprUpgrade nspr-devel | May 4, 2022 | Jul 9, 2020 |
| Alpine Linux | — | Upgrade nssUpgrade librewolfUpgrade firefox | Aug 22, 2024 | Jul 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nspr-develUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-util-develUpgrade nss-softokn-freeblUpgrade nssUpgrade nss-softoknUpgrade nss-toolsUpgrade nss-debuginfoUpgrade nss-softokn-develUpgrade nss-utilUpgrade nspr-debuginfoUpgrade nss-util-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-debuginfoUpgrade nss-devel | Nov 12, 2020 | Jul 9, 2020 |
| Amazon_linux | — | Upgrade nss-softoknUpgrade nsprUpgrade nss-util | Jul 13, 2021 | Jul 3, 2020 |
| Centos_linux | — | Upgrade nsprUpgrade nss-softokn-freebl-debuginfoUpgrade nssUpgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-softokn-freeblUpgrade nspr-develUpgrade nss-toolsUpgrade nss-sysinit-debuginfoUpgrade nss-util-debuginfoUpgrade nspr-debugsourceUpgrade nss-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-sysinitUpgrade nspr-debuginfoUpgrade nss-debugsourceUpgrade nss-softokn-develUpgrade nss-softokn-freebl-devel | Aug 4, 2020 | Jul 9, 2020 |
| Debian | — | Upgrade nss | Jul 2, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jul 28, 2020 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-softokn-freebl | Feb 2, 2021 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nss-utilUpgrade nssUpgrade nss-softokn | Jun 2, 2021 | Jul 9, 2020 |
| Mfsa2020 24 | — | Upgrade to Mozilla Firefox version 78.0 | Jul 2, 2020 | Jun 30, 2020 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 78.0 | Jul 17, 2020 | Jul 9, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jul 9, 2020 |
| Oracle_linux | — | Upgrade nss-softoknUpgrade nss-sysinitUpgrade nssUpgrade nss-toolsUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nspr-develUpgrade nss-util-develUpgrade nsprUpgrade nss-softokn-devel | Aug 5, 2020 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade nss-tools-debuginfoUpgrade nss-debuginfoUpgrade nspr-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-softokn-freeblUpgrade nspr-debugsourceUpgrade nss-util-develNo solution existsUpgrade nss-softoknUpgrade nsprUpgrade nss-util-debuginfoUpgrade nss-debugsourceUpgrade nss-develUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-sysinit-debuginfoUpgrade nspr-debuginfoUpgrade nss-utilUpgrade nssUpgrade nss-pkcs11-devel | Aug 4, 2020 | Jul 9, 2020 |
| Rocky_linux | — | Upgrade nspr-debugsourceUpgrade nspr-debuginfoUpgrade nspr-develUpgrade nspr | Mar 12, 2024 | Jul 9, 2020 |
| Suse | — | Upgrade mozillafirefox-develUpgrade libfreebl3-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-toolsUpgrade libsoftokn3Upgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3-32bitUpgrade mozillafirefox-translations-otherUpgrade libsoftokn3-hmacUpgrade libfreebl3-hmac-32bitUpgrade mozillafirefoxUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-sysinitUpgrade libfreebl3-hmacUpgrade mozillafirefox-translations-commonUpgrade mozillafirefox-branding-sleUpgrade mozilla-nspr-32bitUpgrade libfreebl3Upgrade mozillafirefox-branding-sledUpgrade mozilla-nsprUpgrade mozilla-nssUpgrade mozilla-nss-develUpgrade mozilla-nspr-develUpgrade mozilla-nss-certsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinit-32bit | Jul 4, 2020 | Jul 3, 2020 |
| Ubuntu | — | Upgrade libnss3 (Ubuntu Pro)Upgrade libnss3 | Aug 5, 2020 | Jul 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub