During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nsprUpgrade nspr-devel | May 4, 2022 | Jul 9, 2020 |
| Alpine Linux | — | Upgrade firefoxUpgrade nssUpgrade librewolf | Aug 22, 2024 | Jul 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nsprUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-pkcs11-develUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nssUpgrade nspr-develUpgrade nss-debuginfoUpgrade nss-utilUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-util-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-devel | Nov 12, 2020 | Jul 9, 2020 |
| Amazon_linux | — | Upgrade nss-softoknUpgrade nss-utilUpgrade nspr | Jul 13, 2021 | Jul 3, 2020 |
| Centos_linux | — | Upgrade nss-softokn-freeblUpgrade nsprUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-utilUpgrade nssUpgrade nss-toolsUpgrade nss-softokn-freebl-debuginfoUpgrade nspr-develUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-sysinit-debuginfoUpgrade nss-softoknUpgrade nss-sysinitUpgrade nss-util-debuginfoUpgrade nss-util-develUpgrade nspr-debugsourceUpgrade nss-debuginfoUpgrade nss-debugsourceUpgrade nss-tools-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-devel | Aug 4, 2020 | Jul 9, 2020 |
| Debian | — | Upgrade nss | Jul 2, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jul 28, 2020 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-softokn-freebl-devel | Feb 2, 2021 | Jul 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nss-utilUpgrade nssUpgrade nss-softokn | Jun 2, 2021 | Jul 9, 2020 |
| Mfsa2020 24 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 78.0 | Jul 2, 2020 | Jun 30, 2020 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 78.0Upgrade to the latest version of Mozilla Thunderbird | Jul 17, 2020 | Jul 9, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jul 9, 2020 |
| Oracle_linux | — | Upgrade nssUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-utilUpgrade nss-develUpgrade nss-softokn-develUpgrade nspr-develUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nsprUpgrade nss-softokn-freebl-devel | Aug 5, 2020 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade nss-debugsourceUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nsprUpgrade nss-util-develUpgrade nss-softokn-develUpgrade nss-debuginfoUpgrade nss-softokn-freeblUpgrade nss-softoknNo solution existsUpgrade nss-softokn-freebl-debuginfoUpgrade nspr-develUpgrade nss-tools-debuginfoUpgrade nss-sysinitUpgrade nspr-debugsourceUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-softokn-debuginfoUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-utilUpgrade nssUpgrade nspr-debuginfo | Aug 4, 2020 | Jul 9, 2020 |
| Rocky_linux | — | Upgrade nspr-develUpgrade nsprUpgrade nspr-debuginfoUpgrade nspr-debugsource | Mar 12, 2024 | Jul 9, 2020 |
| Suse | — | Upgrade mozilla-nssUpgrade mozilla-nspr-develUpgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-nss-develUpgrade MozillaFirefox-branding-SLEDUpgrade mozillafirefox-branding-sleUpgrade mozilla-nss-certsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nspr-32bitUpgrade MozillaFirefoxUpgrade libfreebl3-hmacUpgrade mozilla-nss-toolsUpgrade libsoftokn3-32bitUpgrade libfreebl3-32bitUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3-hmac-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-sysinitUpgrade libsoftokn3-hmacUpgrade MozillaFirefox-develUpgrade libsoftokn3-hmac-32bitUpgrade MozillaFirefox-translations-commonUpgrade libsoftokn3Upgrade mozillafirefox-branding-upstream | Jul 4, 2020 | Jul 3, 2020 |
| Ubuntu | — | Upgrade libnss3Upgrade libnss3 (Ubuntu Pro) | Aug 5, 2020 | Jul 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub