Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-12400
HistoryAug 05, 2020 - 12:00 a.m.

CVE-2020-12400

2020-08-0500:00:00
ubuntu.com
ubuntu.com
12

1.2 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

15.5%

When converting coordinates from projective to affine, the modular
inversion was not performed in constant time, resulting in a possible
timing-based side channel attack. This vulnerability affects Firefox < 80
and Firefox for Android < 80.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchfirefox< 80.0+build2-0ubuntu0.18.04.1UNKNOWN
ubuntu20.04noarchfirefox< 80.0+build2-0ubuntu0.20.04.1UNKNOWN
ubuntu16.04noarchfirefox< 80.0+build2-0ubuntu0.16.04.1UNKNOWN
ubuntu18.04noarchnss< 2:3.35-2ubuntu2.11UNKNOWN
ubuntu20.04noarchnss< 2:3.49.1-1ubuntu1.4UNKNOWN
ubuntu14.04noarchnss< 2:3.28.4-0ubuntu0.14.04.5+esm7UNKNOWN
ubuntu16.04noarchnss< 2:3.28.4-0ubuntu0.16.04.13UNKNOWN

1.2 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

15.5%