vulnerability

Red Hat: CVE-2016-9074: nss: Insufficient timing side-channel resistance in divSpoiler

Name: Red Hat: CVE-2016-9074: nss: Insufficient timing side-channel resistance in divSpoiler
Creator: Red Hat
Published: 2018-06-11T00:00:00.000Z
Keywords: CVE, CWE-200, Red Hat, 2016, 9074, nss, no-fix-redhat-rpm-package, Severity 4

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

Published

Jun 11, 2018

Added

Jul 9, 2025

Modified

Jul 16, 2026

Description

An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Solution

no-fix-redhat-rpm-package

References

CWE-200
EUVD-EUVD-2016-9895
NVD-CVE-2016-9074
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-9895

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report