Поиск уязвимостей
Количество 28
Количество 28
CVE-2020-12400
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
CVE-2020-12400
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
CVE-2020-12400
When converting coordinates from projective to affine, the modular inv ...
GHSA-9h25-47mw-52hh
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.
GHSA-38vr-4p57-8h9g
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
BDU:2020-03960
Уязвимость функции модульной инверсии набора библиотек NSS (Network Security Services), позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2021-2725
ALT-PU-2021-2725: package `firefox-esr` update to version 91.0.1-alt1
ALT-PU-2021-2881
ALT-PU-2021-2881: package `firefox-esr` update to version 91.1.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-12400 When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80. | CVSS3: 4.4 | 0% Низкий | больше 6 лет назад |
 | CVE-2020-12400 When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80. | CVSS3: 4.7 | 0% Низкий | около 6 лет назад |
| CVE-2020-12400 When converting coordinates from projective to affine, the modular inv ... | CVSS3: 4.7 | 0% Низкий | около 6 лет назад |
| GHSA-9h25-47mw-52hh A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability. | CVSS3: 9.1 | 2% Низкий | больше 4 лет назад |
| GHSA-38vr-4p57-8h9g When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80. | CVSS3: 4.7 | 0% Низкий | больше 4 лет назад |
 | BDU:2020-03960 Уязвимость функции модульной инверсии набора библиотек NSS (Network Security Services), позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| ALT-PU-2021-2725 ALT-PU-2021-2725: package `firefox-esr` update to version 91.0.1-alt1 | CVSS3: 9.8 | около 5 лет назад | |
| ALT-PU-2021-2881 ALT-PU-2021-2881: package `firefox-esr` update to version 91.1.0-alt1 | CVSS3: 9.8 | около 5 лет назад |
Уязвимостей на страницу