Описание
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 77.0.1+build1-0ubuntu0.18.04.1 |
| devel | released | 77.0.1+build1-0ubuntu1 |
| eoan | released | 77.0.1+build1-0ubuntu0.19.10.1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | released | 77.0.1+build1-0ubuntu0.20.04.1 |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | |
| upstream | released | 77.0 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2:3.35-2ubuntu2.8 |
| devel | released | 2:3.49.1-1ubuntu2 |
| eoan | released | 2:3.45-1ubuntu2.3 |
| esm-infra-legacy/trusty | released | 2:3.28.4-0ubuntu0.14.04.5+esm5 |
| esm-infra/bionic | released | 2:3.35-2ubuntu2.8 |
| esm-infra/focal | released | 2:3.49.1-1ubuntu1.1 |
| esm-infra/xenial | released | 2:3.28.4-0ubuntu0.16.04.11 |
| focal | released | 2:3.49.1-1ubuntu1.1 |
| precise/esm | not-affected | 2:3.28.4-0ubuntu0.12.04.8 |
| trusty | ignored | end of standard support |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:68.10.0+build1-0ubuntu0.18.04.1 |
| devel | released | 1:68.9.0+build1-0ubuntu1 |
| eoan | released | 1:68.10.0+build1-0ubuntu0.19.10.1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | released | 1:68.10.0+build1-0ubuntu0.20.04.1 |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | |
| upstream | released | 68.9.0 |
Показывать по
Ссылки на источники
EPSS
1.2 Low
CVSS2
4.4 Medium
CVSS3
Связанные уязвимости
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
NSS has shown timing differences when performing DSA signatures, which ...
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
Уязвимость подписи DSA веб-браузеров программного обеспечения Firefox, Firefox-esr и Thunderbird, связанная с раскрытием информации в результате расхождений, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS
1.2 Low
CVSS2
4.4 Medium
CVSS3