Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9074

Опубликовано: 15 нояб. 2016
Источник: redhat
CVSS3: 3.7
CVSS2: 4.3
EPSS Низкий

Описание

An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5nssWill not fix
Red Hat Enterprise Linux 6nssWill not fix
Red Hat Enterprise Linux 7nssWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-385
https://bugzilla.redhat.com/show_bug.cgi?id=1396548nss: Insufficient timing side-channel resistance in divSpoiler

EPSS

Процентиль: 79%
0.01221
Низкий

3.7 Low

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 7 лет назад

An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

CVSS3: 5.9
nvd
больше 7 лет назад

An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

CVSS3: 5.9
debian
больше 7 лет назад

An existing mitigation of timing side-channel attacks is insufficient ...

CVSS3: 5.9
github
больше 3 лет назад

An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

suse-cvrf
около 9 лет назад

Security update for MozillaFirefox, mozilla-nss

EPSS

Процентиль: 79%
0.01221
Низкий

3.7 Low

CVSS3

4.3 Medium

CVSS2