NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nss-sysinitUpgrade firefoxUpgrade nssUpgrade firefox-x11Upgrade nss-softokn-develUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-develUpgrade thunderbirdUpgrade nss-util-develUpgrade nss-utilUpgrade nspr-develUpgrade nss-tools | Jan 15, 2024 | Jan 10, 2024 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade thunderbirdUpgrade firefoxUpgrade nss | Mar 26, 2024 | Mar 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-debuginfoUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nss-softokn-freebl-devel | Jan 23, 2024 | Jan 23, 2024 |
| Amazon_linux | — | Upgrade nss-softokn | May 13, 2025 | Jan 22, 2024 |
| Amazon_linux_2023 | — | Upgrade nssUpgrade nss-util-debuginfoUpgrade nss-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-softokn-freebl-debuginfoUpgrade nss-develUpgrade nss-debugsourceUpgrade nss-utilUpgrade nss-softokn-freeblUpgrade nspr-develUpgrade nspr-debuginfoUpgrade nss-softokn-develUpgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nss-softoknUpgrade nss-softokn-freebl-develUpgrade nspr | Feb 17, 2025 | Oct 12, 2023 |
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbirdUpgrade nss | Mar 12, 2024 | Mar 12, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Aug 7, 2025 | Aug 6, 2025 |
| Mfsa2024 12 | — | Upgrade to Mozilla Firefox version 124.0 | Mar 20, 2024 | Mar 19, 2024 |
| Mfsa2024 13 | — | Upgrade to Mozilla Firefox ESR version 115.9 | Mar 20, 2024 | Mar 19, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.9 | Mar 20, 2024 | Mar 19, 2024 |
| Oracle_linux | — | Upgrade nss-utilUpgrade nss-sysinitUpgrade nss-develUpgrade firefoxUpgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nsprUpgrade nss-softoknUpgrade nssUpgrade nss-toolsUpgrade nss-util-develUpgrade firefox-x11Upgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade thunderbird | Mar 26, 2024 | Oct 12, 2023 |
| Redhat_linux | — | Upgrade nss-softoknUpgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-tools-debuginfoUpgrade thunderbirdUpgrade nss-debugsourceUpgrade nss-softokn-develUpgrade nspr-develUpgrade nss-util-develUpgrade firefoxUpgrade nss-softokn-freeblUpgrade thunderbird-debugsourceUpgrade nsprUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade thunderbird-debuginfoNo solution existsUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nss-sysinit-debuginfoUpgrade firefox-debugsourceUpgrade firefox-x11Upgrade firefox-debuginfoUpgrade nss-utilUpgrade nss-softokn-freebl-debuginfoUpgrade nssUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfo | Jan 10, 2024 | Oct 12, 2023 |
| Rocky_linux | — | Upgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade firefox-debugsourceUpgrade nss-util-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-debugsourceUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nssUpgrade nss-softokn-develUpgrade firefoxUpgrade thunderbird-debugsourceUpgrade nss-util-develUpgrade thunderbirdUpgrade nss-toolsUpgrade thunderbird-debuginfoUpgrade nss-softokn-freeblUpgrade nss-debuginfoUpgrade nss-softoknUpgrade nss-sysinitUpgrade firefox-debuginfo | Mar 5, 2024 | Jan 12, 2024 |
| Suse | — | Upgrade mozilla-nss-sysinitUpgrade MozillaFirefox-develUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade MozillaThunderbirdUpgrade libsoftokn3-32bitUpgrade libsoftokn3Upgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade libfreebl3-32bitUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade libfreebl3Upgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-certsUpgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade mozilla-nss | Feb 22, 2024 | Feb 21, 2024 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3Upgrade thunderbird | Mar 21, 2024 | Mar 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub