vulnerability

Ubuntu: (Multiple Advisories) (CVE-2020-12400): NSS vulnerabilities

Severity
1
CVSS
(AV:L/AC:H/Au:N/C:P/I:N/A:N)
Published
Aug 10, 2020
Added
Aug 11, 2020
Modified
Aug 18, 2025

Description

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

Solutions

ubuntu-pro-upgrade-firefoxubuntu-pro-upgrade-libnss3
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.