When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nss-sysinitUpgrade nssUpgrade nss-develUpgrade nss-softokn-freeblUpgrade nss-softokn-freebl-develUpgrade nss-util-develUpgrade nss-toolsUpgrade nss-softokn-develUpgrade nss-utilUpgrade nss-softokn | May 4, 2022 | Oct 28, 2020 |
| Alpine Linux | — | Upgrade librewolfUpgrade nssUpgrade firefox | Aug 22, 2024 | Oct 28, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-freebl-develUpgrade nspr-debuginfoUpgrade nss-util-debuginfoUpgrade nssUpgrade nss-softoknUpgrade nss-debuginfoUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade nspr-develUpgrade nss-develUpgrade nss-toolsUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-pkcs11-devel | Nov 12, 2020 | Oct 28, 2020 |
| Amazon_linux | — | Upgrade nsprUpgrade nss-softoknUpgrade nss-util | Jul 13, 2021 | Aug 10, 2020 |
| Centos_linux | — | Upgrade nspr-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-softokn-develUpgrade nss-pkcs11-develUpgrade nss-softoknUpgrade nss-debugsourceUpgrade nss-softokn-debuginfoUpgrade nspr-develUpgrade nss-softokn-freeblUpgrade nss-utilUpgrade nss-develUpgrade nsprUpgrade nss-toolsUpgrade nssUpgrade nss-sysinit-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-util-debuginfoUpgrade nss-debuginfo | Oct 1, 2020 | Sep 29, 2020 |
| Debian | — | Upgrade nss | Oct 1, 2020 | Oct 1, 2020 |
| Mfsa2020 36 | — | Upgrade to Mozilla Firefox version 80.0Upgrade to the latest version of Mozilla Firefox | Aug 26, 2020 | Aug 25, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade nspr-develUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nss-softokn-freebl-develUpgrade nss-util-develUpgrade nsprUpgrade nss-develUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nss-toolsUpgrade nssUpgrade nss-sysinit | Oct 9, 2020 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade nss-util-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-debugsourceUpgrade nss-develNo solution existsUpgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-pkcs11-develUpgrade nss-sysinit-debuginfoUpgrade nss-utilUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-softoknUpgrade nssUpgrade nsprUpgrade nss-tools-debuginfoUpgrade nspr-develUpgrade nspr-debuginfo | Oct 1, 2020 | Sep 29, 2020 |
| Rocky_linux | — | Upgrade nss-tools-debuginfoUpgrade nss-util-develUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-sysinitUpgrade nss-softokn-develUpgrade nss-debuginfoUpgrade nss-toolsUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-debugsourceUpgrade nssUpgrade nss-softokn-freebl-develUpgrade nss-softokn-debuginfoUpgrade nss-utilUpgrade nss-develUpgrade nss-util-debuginfo | Mar 12, 2024 | Oct 28, 2020 |
| Suse | — | Upgrade mozilla-nspr-develUpgrade libfreebl3-hmacUpgrade mozilla-nsprUpgrade mozilla-nss-sysinitUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3Upgrade mozilla-nssUpgrade mozilla-nspr-32bitUpgrade libsoftokn3-32bitUpgrade mozilla-nss-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-certsUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade libsoftokn3-hmacUpgrade libsoftokn3Upgrade mozilla-nss-certs-32bitUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3-hmac-32bit | Sep 17, 2021 | Aug 10, 2020 |
| Ubuntu | — | Upgrade libnss3 (Ubuntu Pro)Upgrade libnss3Upgrade firefox | Aug 11, 2020 | Aug 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub