Lucene search
PRIOn knowledge basePRION:CVE-2020-12399HistoryJul 09, 2020 - 3:15 p.m.
Design/Logic Flaw
2020-07-0915:15:00
PRIOn knowledge base
www.prio-n.com
5
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| firefox | lt | 77.0 | |
| firefox_esr | lt | 68.9.0 | |
| thunderbird | lt | 68.9.0 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1631576
lists.debian.org/debian-lts-announce/2020/09/msg00029.html
security.gentoo.org/glsa/202007-49
usn.ubuntu.com/4421-1/
www.debian.org/security/2020/dsa-4726
www.mozilla.org/security/advisories/mfsa2020-20/
www.mozilla.org/security/advisories/mfsa2020-21/
www.mozilla.org/security/advisories/mfsa2020-22/
Related
alpinelinux
alpinelinux
CVE-2020-12399
2020-07-09 15:15:10
nvd
nvd
CVE-2020-12399
2020-07-09 15:15:10
cvelist
cvelist
CVE-2020-12399
2020-07-09 14:52:16
debiancve
debiancve
CVE-2020-12399
2020-07-09 15:15:10
openvas
openvas
Ubuntu: Security Advisory (USN-4397-2)
2022-08-26 00:00:00
openSUSE: Security Advisory for mozilla-nspr, (openSUSE-SU-2020:0854-1)
2020-06-25 00:00:00
Debian: Security Advisory (DLA-2266-1)
2020-07-01 00:00:00
cve
cve
CVE-2020-12399
2020-07-09 15:15:10
nessus
nessus
Mozilla Firefox ESR < 68.9
2020-06-02 00:00:00
Debian DLA-2266-1 : nss security update
2020-07-01 00:00:00
gentoo
gentoo
Mozilla Network Security Service (NSS): Information disclosure
2020-07-27 00:00:00
redhatcve
redhatcve
CVE-2020-12399
2020-05-21 02:55:42
veracode
veracode
Information Disclosure
2020-08-06 21:36:34
ubuntucve
ubuntucve
CVE-2020-12399
2020-05-26 00:00:00
ubuntu
ubuntu
NSS vulnerability
2020-06-17 00:00:00
NSS vulnerabilities
2020-06-16 00:00:00
Firefox vulnerabilities
2020-06-04 00:00:00
suse
suse
Security update for mozilla-nspr, mozilla-nss (important)
2020-06-24 00:00:00
osv
osv
nss - security update
2020-06-30 00:00:00
firefox-esr - security update
2020-06-09 00:00:00
nss - security update
2020-07-17 00:00:00
debian
debian
[SECURITY] [DLA 2266-1] nss security update
2020-06-30 19:21:55
[SECURITY] [DLA 2243-1] firefox-esr security update [REVISED]
2020-06-09 18:29:15
[SECURITY] [DLA 2243-1] firefox-esr security update
2020-06-09 18:25:36
kaspersky
kaspersky
KLA11793 Multiple vulnerabilities in Mozilla Firefox ESR
2020-06-02 00:00:00
KLA11795 Multiple vulnerabilities in Mozilla Thunderbird
2020-06-02 00:00:00
KLA11792 Multiple vulnerabilities in Mozilla Firefox
2020-06-02 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 68.9 — Mozilla
2020-06-02 00:00:00
Security Vulnerabilities fixed in Thunderbird 68.9.0 — Mozilla
2020-06-02 00:00:00
Security Vulnerabilities fixed in Firefox 77 — Mozilla
2020-06-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.9.0-alt1
2020-06-03 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.9.0-alt1
2020-06-04 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2020-06-04 18:27:58
archlinux
archlinux
[ASA-202006-4] thunderbird: multiple issues
2020-06-06 00:00:00
[ASA-202006-1] firefox: multiple issues
2020-06-02 00:00:00
rocky
rocky
nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
redhat
redhat
mageia
mageia
Updated firefox packages fix security vulnerability
2020-07-05 01:47:21