Lucene search

K

GoogleOSV:CVE-2023-5388

HistoryMar 19, 2024 - 12:15 p.m.

CVE-2023-5388

2024-03-1912:15:07

Google

osv.dev

4

cve-2023-5388

timing side-channel attack

private data exposure

firefox

thunderbird

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CPENameOperatorVersion
nsseq3.59-r0
nsseq3.76.1-r0
nsseq3.73-r0
nsseq3.12.8-r0
nsseq3.55-r0
nsseq3.12.6-r0
nsseq3.43-r1
nsseq3.16.3-r0
nsseq3.63-r0
nsseq3.85-r0

Rows per page:

1-10 of 1441

References

bugzilla.mozilla.org/show_bug.cgi?id=1780432

lists.debian.org/debian-lts-announce/2024/03/msg00022.html

lists.debian.org/debian-lts-announce/2024/03/msg00028.html

www.mozilla.org/security/advisories/mfsa2024-12/

www.mozilla.org/security/advisories/mfsa2024-13/

www.mozilla.org/security/advisories/mfsa2024-14/

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

Related for OSV:CVE-2023-5388