Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nssUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-develUpgrade nsprUpgrade nss-toolsUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nss-softokn-develUpgrade nspr-devel | Feb 15, 2024 | Dec 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-softokn-debuginfo | Feb 21, 2024 | Dec 19, 2023 |
| Amazon_linux_2023 | — | Upgrade nss-softokn-freebl-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-develUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-pkcs11-develUpgrade nss-debugsourceUpgrade nspr-debuginfoUpgrade nss-tools-debuginfoUpgrade nssUpgrade nss-debuginfoUpgrade nspr-develUpgrade nss-toolsUpgrade nss-utilUpgrade nsprUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-sysinitUpgrade nss-util-debuginfoUpgrade nss-util-devel | Feb 17, 2025 | Dec 19, 2023 |
| Debian | — | Upgrade nss | May 15, 2025 | Dec 19, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Jan 8, 2024 | Dec 19, 2023 |
| Mfsa2023 56 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 121.0 | Dec 20, 2023 | Dec 19, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 10, 2024 |
| Oracle_linux | — | Upgrade nss-softokn-develUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-softoknUpgrade nspr-develUpgrade nss-utilUpgrade nsprUpgrade nss-softokn-freeblUpgrade nss-pkcs11-develUpgrade nssUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-util-devel | Feb 14, 2024 | Dec 19, 2023 |
| Redhat_linux | — | Upgrade nss-tools-debuginfoUpgrade nspr-develUpgrade firefoxUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nss-toolsUpgrade nsprUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-util-debuginfoUpgrade nss-sysinitUpgrade nspr-debuginfoUpgrade nss-debugsourceUpgrade nss-softokn-freebl-debuginfoNo solution existsUpgrade nss-softokn-debuginfoUpgrade firefox-x11Upgrade firefox-debuginfoUpgrade nss-utilUpgrade firefox-debugsourceUpgrade nss | Feb 13, 2024 | Dec 19, 2023 |
| Rocky_linux | — | Upgrade nss-utilUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-toolsUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nssUpgrade nss-util-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-debugsourceUpgrade nss-softokn-freebl-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-devel | Mar 13, 2024 | Dec 19, 2023 |
| Ubuntu | — | Upgrade libnss3Upgrade firefox | Jan 3, 2024 | Dec 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub