When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nss-sysinitUpgrade nssUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nss-toolsUpgrade nss-develUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nss-util-devel | May 4, 2022 | Oct 28, 2020 |
| Alpine Linux | — | Upgrade firefoxUpgrade nssUpgrade librewolf | Aug 22, 2024 | Oct 28, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-softoknUpgrade nssUpgrade nss-softokn-freebl-develUpgrade nss-util-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-utilUpgrade nss-develUpgrade nspr-develUpgrade nss-toolsUpgrade nss-pkcs11-devel | Nov 12, 2020 | Oct 28, 2020 |
| Amazon_linux | — | Upgrade nsprUpgrade nss-softoknUpgrade nss-util | Jul 13, 2021 | Aug 10, 2020 |
| Centos_linux | — | Upgrade nss-util-develUpgrade nss-tools-debuginfoUpgrade nss-sysinitUpgrade nssUpgrade nss-toolsUpgrade nss-debuginfoUpgrade nss-util-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nspr-debuginfoUpgrade nsprUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nspr-develUpgrade nss-pkcs11-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-softoknUpgrade nss-debugsourceUpgrade nss-softokn-devel | Oct 1, 2020 | Sep 29, 2020 |
| Debian | — | Upgrade nss | Oct 1, 2020 | Oct 1, 2020 |
| Mfsa2020 36 | — | Upgrade to Mozilla Firefox version 80.0 | Aug 26, 2020 | Aug 25, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade nss-util-develUpgrade nss-softokn-freeblUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nsprUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss | Oct 9, 2020 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nspr-debuginfoUpgrade nss-toolsUpgrade nss-tools-debuginfoUpgrade nsprUpgrade nss-softoknUpgrade nssUpgrade nss-util-develUpgrade nspr-develUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-utilUpgrade nss-util-debuginfoUpgrade nss-debugsourceNo solution existsUpgrade nss-develUpgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-pkcs11-devel | Oct 1, 2020 | Sep 29, 2020 |
| Rocky_linux | — | Upgrade nss-util-develUpgrade nss-tools-debuginfoUpgrade nss-debuginfoUpgrade nss-softokn-develUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nss-develUpgrade nss-sysinit-debuginfoUpgrade nssUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-debugsource | Mar 12, 2024 | Oct 28, 2020 |
| Suse | — | Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade libsoftokn3-32bitUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-certsUpgrade libfreebl3-hmac-32bitUpgrade libsoftokn3-hmacUpgrade libfreebl3-32bitUpgrade libsoftokn3Upgrade mozilla-nsprUpgrade mozilla-nssUpgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-sysinitUpgrade libfreebl3-hmac | Sep 17, 2021 | Aug 10, 2020 |
| Ubuntu | — | Upgrade libnss3 (Ubuntu Pro)Upgrade firefoxUpgrade libnss3 | Aug 11, 2020 | Aug 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub