ZeroHour

CVE-2023-5388

CVSS 3.1
6.5 medium
EPSS
<1%p55
Published
()
Modified
Description

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

Vendors
mozilladebian
Products
firefox, thunderbird, debian linux
Weakness
CWE-203
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

In the news

No ingested article mentions this CVE yet.