NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nss-sysinitUpgrade firefoxUpgrade nssUpgrade firefox-x11Upgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade thunderbirdUpgrade nsprUpgrade nss-develUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-util | Jan 15, 2024 | Jan 10, 2024 |
| Alpine Linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade nssUpgrade firefox-esr | Mar 26, 2024 | Mar 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-debuginfoUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-softokn-freebl | Jan 23, 2024 | Jan 23, 2024 |
| Amazon_linux | — | Upgrade nss-softokn | May 13, 2025 | Jan 22, 2024 |
| Amazon_linux_2023 | — | Upgrade nss-softokn-develUpgrade nspr-debuginfoUpgrade nss-debugsourceUpgrade nss-develUpgrade nss-util-develUpgrade nss-utilUpgrade nspr-develUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nss-pkcs11-develUpgrade nss-sysinit-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-softokn-debuginfoUpgrade nssUpgrade nss-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-util-debuginfo | Feb 17, 2025 | Oct 12, 2023 |
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esrUpgrade nss | Mar 12, 2024 | Mar 12, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade dev-libs/nss. | Aug 7, 2025 | Aug 6, 2025 |
| Mfsa2024 12 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 124.0 | Mar 20, 2024 | Mar 19, 2024 |
| Mfsa2024 13 | — | Upgrade to Mozilla Firefox ESR version 115.9Upgrade to the latest version of Mozilla Firefox | Mar 20, 2024 | Mar 19, 2024 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 115.9 | Mar 20, 2024 | Mar 19, 2024 |
| Oracle_linux | — | Upgrade nss-softokn-develUpgrade thunderbirdUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nsprUpgrade firefox-x11Upgrade nss-util-develUpgrade nspr-develUpgrade nssUpgrade nss-softoknUpgrade nss-utilUpgrade nss-sysinitUpgrade firefoxUpgrade nss-develUpgrade nss-softokn-freebl-devel | Mar 26, 2024 | Oct 12, 2023 |
| Redhat_linux | — | Upgrade nspr-develUpgrade nss-tools-debuginfoUpgrade nss-softokn-develUpgrade thunderbirdUpgrade firefoxUpgrade nss-debugsourceUpgrade nss-debuginfoUpgrade thunderbird-debugsourceUpgrade nss-sysinitUpgrade nss-util-develUpgrade nss-softokn-freeblUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nsprUpgrade nss-toolsUpgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nssUpgrade nss-utilUpgrade nspr-debuginfoUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade nss-sysinit-debuginfoUpgrade firefox-x11Upgrade nss-develUpgrade firefox-debuginfoUpgrade nss-softokn-freebl-debuginfoNo solution exists | Jan 10, 2024 | Oct 12, 2023 |
| Rocky_linux | — | Upgrade nss-tools-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-util-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-debugsourceUpgrade firefox-debugsourceUpgrade nss-softokn-freebl-develUpgrade nss-softokn-debuginfoUpgrade nss-develUpgrade nssUpgrade nss-utilUpgrade nss-util-develUpgrade nss-toolsUpgrade nss-debuginfoUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade thunderbirdUpgrade nss-softokn-develUpgrade firefoxUpgrade nss-sysinitUpgrade nss-softoknUpgrade thunderbird-debugsourceUpgrade nss-softokn-freebl | Mar 5, 2024 | Jan 12, 2024 |
| Suse | — | Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-certs-32bitUpgrade libsoftokn3-32bitUpgrade libsoftokn3Upgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade mozilla-nss-sysinitUpgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade MozillaThunderbirdUpgrade libfreebl3-32bitUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nssUpgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-certsUpgrade mozilla-nss-develUpgrade libfreebl3 | Feb 22, 2024 | Feb 21, 2024 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade libnss3 | Mar 21, 2024 | Mar 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub