NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nss-toolsUpgrade nss-develUpgrade nss-util-develUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nsprUpgrade thunderbirdUpgrade nss-utilUpgrade nss-sysinitUpgrade nssUpgrade firefoxUpgrade firefox-x11 | Jan 15, 2024 | Jan 10, 2024 |
| Alpine Linux | — | Upgrade nssUpgrade firefoxUpgrade thunderbirdUpgrade firefox-esr | Mar 26, 2024 | Mar 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-debuginfoUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freeblUpgrade nss-softokn | Jan 23, 2024 | Jan 23, 2024 |
| Amazon_linux | — | Upgrade nss-softokn | May 13, 2025 | Jan 22, 2024 |
| Amazon_linux_2023 | — | Upgrade nss-softokn-freebl-develUpgrade nspr-debuginfoUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nsprUpgrade nss-pkcs11-develUpgrade nss-debugsourceUpgrade nss-softokn-freeblUpgrade nss-util-develUpgrade nspr-develUpgrade nss-utilUpgrade nss-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nss-tools-debuginfoUpgrade nss-sysinitUpgrade nss-sysinit-debuginfoUpgrade nss-debuginfoUpgrade nss | Feb 17, 2025 | Oct 12, 2023 |
| Centos_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | Upgrade nssUpgrade thunderbirdUpgrade firefox-esr | Mar 12, 2024 | Mar 12, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Aug 7, 2025 | Aug 6, 2025 |
| Mfsa2024 12 | — | Upgrade to Mozilla Firefox version 124.0Upgrade to the latest version of Mozilla Firefox | Mar 20, 2024 | Mar 19, 2024 |
| Mfsa2024 13 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 115.9 | Mar 20, 2024 | Mar 19, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.9Upgrade to the latest version of Mozilla Thunderbird | Mar 20, 2024 | Mar 19, 2024 |
| Oracle_linux | — | Upgrade nss-softokn-freebl-develUpgrade firefoxUpgrade nss-sysinitUpgrade nss-develUpgrade nss-utilUpgrade nssUpgrade nss-softokn-freeblUpgrade nspr-develUpgrade nsprUpgrade nss-util-develUpgrade nss-toolsUpgrade firefox-x11Upgrade nss-softokn-develUpgrade thunderbirdUpgrade nss-softokn | Mar 26, 2024 | Oct 12, 2023 |
| Redhat_linux | — | Upgrade nss-softokn-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-toolsUpgrade nspr-debuginfoNo solution existsUpgrade firefox-x11Upgrade nss-softokn-freebl-debuginfoUpgrade nssUpgrade nss-util-debuginfoUpgrade firefox-debuginfoUpgrade nss-utilUpgrade thunderbird-debuginfoUpgrade nss-develUpgrade firefox-debugsourceUpgrade nss-util-develUpgrade nss-softokn-develUpgrade thunderbird-debugsourceUpgrade nss-softokn-freeblUpgrade nss-tools-debuginfoUpgrade nspr-develUpgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-softoknUpgrade firefoxUpgrade nsprUpgrade nss-softokn-freebl-develUpgrade thunderbirdUpgrade nss-debugsource | Jan 10, 2024 | Oct 12, 2023 |
| Rocky_linux | — | Upgrade nss-debugsourceUpgrade nss-util-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-develUpgrade nss-softokn-freebl-develUpgrade nssUpgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade firefox-debugsourceUpgrade nss-sysinit-debuginfoUpgrade nss-debuginfoUpgrade firefoxUpgrade nss-softokn-freeblUpgrade thunderbird-debugsourceUpgrade thunderbirdUpgrade firefox-debuginfoUpgrade nss-toolsUpgrade nss-util-develUpgrade thunderbird-debuginfoUpgrade nss-softoknUpgrade nss-sysinitUpgrade nss-softokn-devel | Mar 5, 2024 | Jan 12, 2024 |
| Suse | — | Upgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-translations-commonUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade libfreebl3-32bitUpgrade MozillaThunderbirdUpgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3Upgrade MozillaFirefoxUpgrade mozilla-nss-sysinitUpgrade MozillaFirefox-develUpgrade libfreebl3Upgrade mozilla-nss-certsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss | Feb 22, 2024 | Feb 21, 2024 |
| Ubuntu | — | Upgrade thunderbirdUpgrade libnss3Upgrade firefox | Mar 21, 2024 | Mar 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub