CVE-2023-5388
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-5388
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5388.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-5388
- Related
- Published
- 2024-03-19T12:15:07Z
- Modified
- 2024-05-22T17:36:46.938231Z
- Summary
- [none]
- Details
-
NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
- References
-
- https://www.mozilla.org/security/advisories/mfsa2024-12/
- https://www.mozilla.org/security/advisories/mfsa2024-13/
- https://www.mozilla.org/security/advisories/mfsa2024-14/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1780432
- https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html
- https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
Affected packages
Alpine:v3.19 / nss
Package
- Name
- nss
- Purl
- pkg:apk/alpine/nss?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.98-r0
Affected versions
3.*
3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r0
3.12.10-r0
3.12.11-r0
3.12.11-r1
3.13.1-r0
3.13.1-r1
3.13.3-r0
3.13.4-r0
3.13.4-r1
3.13.5-r0
3.13.6-r0
3.14-r0
3.14.1-r0
3.14.1.1.93-r0
3.14.3-r0
3.15.1-r0
3.15.1-r1
3.15.1-r2
3.15.2-r0
3.15.3-r0
3.15.3.1-r0
3.15.4-r0
3.15.5-r0
3.16-r0
3.16.1-r0
3.16.3-r0
3.17.1-r0
3.17.2-r0
3.17.3-r0
3.17.4-r0
3.18-r0
3.18.1-r0
3.19.2-r0
3.19.2-r1
3.20-r0
3.20.1-r0
3.21-r0
3.22-r0
3.22.1-r0
3.22.3-r0
3.23-r0
3.26-r0
3.27.1-r0
3.27.2-r0
3.28.1-r0
3.28.1-r1
3.30-r0
3.30-r1
3.30-r2
3.30.1-r0
3.31-r0
3.32-r0
3.33-r0
3.34-r0
3.34.1-r0
3.34.1-r1
3.36.1-r0
3.38-r0
3.38-r1
3.39-r0
3.41-r0
3.43-r0
3.43-r1
3.44-r0
3.45-r0
3.46-r0
3.46.1-r0
3.47-r0
3.47.1-r0
3.48-r0
3.49-r0
3.49.1-r0
3.49.2-r0
3.50-r0
3.51-r0
3.51.1-r0
3.52-r0
3.52.1-r0
3.53.1-r0
3.54-r0
3.55-r0
3.55-r1
3.57-r0
3.57-r1
3.58-r0
3.59-r0
3.60-r0
3.60.1-r0
3.61-r0
3.62-r0
3.63-r0
3.63-r1
3.64-r0
3.65-r0
3.66-r0
3.67-r0
3.68-r0
3.69-r0
3.69.1-r0
3.70-r0
3.71-r0
3.72-r0
3.73-r0
3.73.1-r0
3.75-r0
3.76-r0
3.76.1-r0
3.77-r0
3.78-r0
3.78.1-r0
3.79-r0
3.80-r0
3.81-r0
3.82-r0
3.83-r0
3.84-r0
3.84-r1
3.85-r0
3.86-r0
3.87-r0
3.88.1-r0
3.89-r0
3.89-r1
3.89.1-r0
3.89.1-r1
3.89.1-r2
3.90-r0
3.90-r1
3.91-r1
3.92-r1
3.93-r1
3.94-r1
3.97-r1
Alpine:v3.20 / nss
Package
- Name
- nss
- Purl
- pkg:apk/alpine/nss?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.98-r0
Affected versions
3.*
3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r0
3.12.10-r0
3.12.11-r0
3.12.11-r1
3.13.1-r0
3.13.1-r1
3.13.3-r0
3.13.4-r0
3.13.4-r1
3.13.5-r0
3.13.6-r0
3.14-r0
3.14.1-r0
3.14.1.1.93-r0
3.14.3-r0
3.15.1-r0
3.15.1-r1
3.15.1-r2
3.15.2-r0
3.15.3-r0
3.15.3.1-r0
3.15.4-r0
3.15.5-r0
3.16-r0
3.16.1-r0
3.16.3-r0
3.17.1-r0
3.17.2-r0
3.17.3-r0
3.17.4-r0
3.18-r0
3.18.1-r0
3.19.2-r0
3.19.2-r1
3.20-r0
3.20.1-r0
3.21-r0
3.22-r0
3.22.1-r0
3.22.3-r0
3.23-r0
3.26-r0
3.27.1-r0
3.27.2-r0
3.28.1-r0
3.28.1-r1
3.30-r0
3.30-r1
3.30-r2
3.30.1-r0
3.31-r0
3.32-r0
3.33-r0
3.34-r0
3.34.1-r0
3.34.1-r1
3.36.1-r0
3.38-r0
3.38-r1
3.39-r0
3.41-r0
3.43-r0
3.43-r1
3.44-r0
3.45-r0
3.46-r0
3.46.1-r0
3.47-r0
3.47.1-r0
3.48-r0
3.49-r0
3.49.1-r0
3.49.2-r0
3.50-r0
3.51-r0
3.51.1-r0
3.52-r0
3.52.1-r0
3.53.1-r0
3.54-r0
3.55-r0
3.55-r1
3.57-r0
3.57-r1
3.58-r0
3.59-r0
3.60-r0
3.60.1-r0
3.61-r0
3.62-r0
3.63-r0
3.63-r1
3.64-r0
3.65-r0
3.66-r0
3.67-r0
3.68-r0
3.69-r0
3.69.1-r0
3.70-r0
3.71-r0
3.72-r0
3.73-r0
3.73.1-r0
3.75-r0
3.76-r0
3.76.1-r0
3.77-r0
3.78-r0
3.78.1-r0
3.79-r0
3.80-r0
3.81-r0
3.82-r0
3.83-r0
3.84-r0
3.84-r1
3.85-r0
3.86-r0
3.87-r0
3.88.1-r0
3.89-r0
3.89-r1
3.89.1-r0
3.89.1-r1
3.89.1-r2
3.90-r0
3.90-r1
3.91-r1
3.92-r1
3.93-r1
3.94-r1
3.96-r1
3.96.1-r1
3.97-r1