NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nss-sysinitUpgrade firefoxUpgrade nssUpgrade firefox-x11Upgrade nsprUpgrade thunderbirdUpgrade nss-softokn-freeblUpgrade nss-util-develUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nss-toolsUpgrade nss-softoknUpgrade nss-develUpgrade nss-util | Jan 15, 2024 | Jan 10, 2024 |
| Alpine Linux | — | Upgrade thunderbirdUpgrade firefox-esrUpgrade firefoxUpgrade nss | Mar 26, 2024 | Mar 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-debuginfoUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freebl | Jan 23, 2024 | Jan 23, 2024 |
| Amazon_linux | — | Upgrade nss-softokn | May 13, 2025 | Jan 22, 2024 |
| Amazon_linux_2023 | — | Upgrade nss-utilUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-debugsourceUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nsprUpgrade nss-develUpgrade nss-util-develUpgrade nspr-develUpgrade nss-pkcs11-develUpgrade nspr-debuginfoUpgrade nss-toolsUpgrade nss-softokn-freebl-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-debuginfoUpgrade nssUpgrade nss-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-util-debuginfo | Feb 17, 2025 | Oct 12, 2023 |
| Centos_linux | — | Upgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade firefox | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | Upgrade thunderbirdUpgrade nssUpgrade firefox-esr | Mar 12, 2024 | Mar 12, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Aug 7, 2025 | Aug 6, 2025 |
| Mfsa2024 12 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 124.0 | Mar 20, 2024 | Mar 19, 2024 |
| Mfsa2024 13 | — | Upgrade to Mozilla Firefox ESR version 115.9Upgrade to the latest version of Mozilla Firefox | Mar 20, 2024 | Mar 19, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.9Upgrade to the latest version of Mozilla Thunderbird | Mar 20, 2024 | Mar 19, 2024 |
| Oracle_linux | — | Upgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-sysinitUpgrade firefoxUpgrade nss-develUpgrade nss-softoknUpgrade nss-softokn-develUpgrade thunderbirdUpgrade nssUpgrade nsprUpgrade nspr-develUpgrade nss-softokn-freeblUpgrade firefox-x11Upgrade nss-toolsUpgrade nss-util-devel | Mar 26, 2024 | Oct 12, 2023 |
| Redhat_linux | — | Upgrade nss-utilUpgrade nss-develUpgrade firefox-debugsourceUpgrade nss-toolsUpgrade nssUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nspr-debuginfoUpgrade nss-util-debuginfoUpgrade nss-softokn-debuginfoUpgrade thunderbird-debuginfoNo solution existsUpgrade firefox-debuginfoUpgrade firefox-x11Upgrade nss-softokn-freebl-develUpgrade nss-debugsourceUpgrade nss-softokn-freeblUpgrade thunderbird-debugsourceUpgrade nspr-develUpgrade nss-softokn-develUpgrade nss-tools-debuginfoUpgrade firefoxUpgrade nss-sysinitUpgrade thunderbirdUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nss-softoknUpgrade nspr | Jan 10, 2024 | Oct 12, 2023 |
| Rocky_linux | — | Upgrade nss-softokn-freebl-develUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-util-debuginfoUpgrade nssUpgrade nss-utilUpgrade firefox-debugsourceUpgrade nss-debugsourceUpgrade nss-develUpgrade nss-util-develUpgrade firefoxUpgrade firefox-debuginfoUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nss-debuginfoUpgrade nss-softokn-freeblUpgrade thunderbird-debugsourceUpgrade thunderbirdUpgrade thunderbird-debuginfoUpgrade nss-toolsUpgrade nss-sysinit | Mar 5, 2024 | Jan 12, 2024 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade mozillafirefox-branding-upstreamUpgrade libfreebl3-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-sysinitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade libsoftokn3Upgrade libsoftokn3-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certsUpgrade mozilla-nssUpgrade libfreebl3Upgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-devel | Feb 22, 2024 | Feb 21, 2024 |
| Ubuntu | — | Upgrade thunderbirdUpgrade libnss3Upgrade firefox | Mar 21, 2024 | Mar 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub