NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefox-x11Upgrade nss-sysinitUpgrade firefoxUpgrade nssUpgrade nss-develUpgrade nspr-develUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nsprUpgrade nss-util-develUpgrade nss-softokn-develUpgrade thunderbirdUpgrade nss-toolsUpgrade nss-softokn-freebl-develUpgrade nss-util | Jan 15, 2024 | Jan 10, 2024 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade firefoxUpgrade nssUpgrade thunderbird | Mar 26, 2024 | Mar 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-softokn-debuginfo | Jan 23, 2024 | Jan 23, 2024 |
| Amazon_linux | — | Upgrade nss-softokn | May 13, 2025 | Jan 22, 2024 |
| Amazon_linux_2023 | — | Upgrade nss-softokn-debuginfoUpgrade nss-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nssUpgrade nss-sysinit-debuginfoUpgrade nss-toolsUpgrade nss-tools-debuginfoUpgrade nss-util-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nss-softoknUpgrade nsprUpgrade nss-util-develUpgrade nspr-develUpgrade nss-develUpgrade nss-debugsourceUpgrade nspr-debuginfoUpgrade nss-utilUpgrade nss-softokn-devel | Feb 17, 2025 | Oct 12, 2023 |
| Centos_linux | — | Upgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade thunderbirdUpgrade firefox | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esrUpgrade nss | Mar 12, 2024 | Mar 12, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Aug 7, 2025 | Aug 6, 2025 |
| Mfsa2024 12 | — | Upgrade to Mozilla Firefox version 124.0Upgrade to the latest version of Mozilla Firefox | Mar 20, 2024 | Mar 19, 2024 |
| Mfsa2024 13 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 115.9 | Mar 20, 2024 | Mar 19, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.9Upgrade to the latest version of Mozilla Thunderbird | Mar 20, 2024 | Mar 19, 2024 |
| Oracle_linux | — | Upgrade nss-softokn-freeblUpgrade nssUpgrade nspr-develUpgrade nss-softoknUpgrade nss-util-develUpgrade firefox-x11Upgrade nss-toolsUpgrade nsprUpgrade nss-softokn-develUpgrade thunderbirdUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-sysinitUpgrade nss-develUpgrade firefox | Mar 26, 2024 | Oct 12, 2023 |
| Redhat_linux | — | Upgrade nss-softokn-freebl-debuginfoUpgrade nssUpgrade nss-softokn-debuginfoUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade nss-toolsUpgrade nspr-debuginfoUpgrade nss-util-debuginfoNo solution existsUpgrade nss-utilUpgrade firefox-x11Upgrade firefox-debuginfoUpgrade nss-develUpgrade nss-sysinit-debuginfoUpgrade nss-softoknUpgrade thunderbird-debugsourceUpgrade nss-softokn-develUpgrade firefoxUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nss-tools-debuginfoUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nss-debugsourceUpgrade thunderbirdUpgrade nss-sysinit | Jan 10, 2024 | Oct 12, 2023 |
| Rocky_linux | — | Upgrade nss-develUpgrade nss-softokn-freebl-develUpgrade firefox-debugsourceUpgrade nss-utilUpgrade nss-debugsourceUpgrade nssUpgrade nss-tools-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-util-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-debuginfoUpgrade thunderbirdUpgrade nss-softokn-develUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-toolsUpgrade firefoxUpgrade thunderbird-debugsourceUpgrade nss-util-develUpgrade thunderbird-debuginfoUpgrade nss-softokn-freeblUpgrade firefox-debuginfo | Mar 5, 2024 | Jan 12, 2024 |
| Suse | — | Upgrade libfreebl3-32bitUpgrade mozilla-nss-sysinitUpgrade MozillaThunderbirdUpgrade mozilla-nss-certs-32bitUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-translations-commonUpgrade libsoftokn3-32bitUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade libsoftokn3Upgrade MozillaFirefox-develUpgrade mozilla-nss-develUpgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade mozilla-nssUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-certs | Feb 22, 2024 | Feb 21, 2024 |
| Ubuntu | — | Upgrade thunderbirdUpgrade libnss3Upgrade firefox | Mar 21, 2024 | Mar 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub