DEBIAN-CVE-2023-6135
- Source
- https://security-tracker.debian.org/tracker/CVE-2023-6135
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-6135.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2023-6135
- Upstream
- Published
- 2023-12-19T14:15:07Z
- Modified
- 2026-09-15T09:02:57Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.
- References
Affected packages
Debian:12 / nss
Package
- Name
- nss
- Purl
- pkg:deb/debian/nss?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2:3.*
2:3.87.1-1
2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
2:3.87.1-1+x32
2:3.89-1
2:3.89-2
2:3.90-1
2:3.90-2
2:3.90-3
2:3.91-1
2:3.92-1
2:3.93-1
2:3.94-1
2:3.95-1
2:3.96.1-1
2:3.98-1
2:3.99-1
2:3.100-1
2:3.101-1
2:3.102-1
2:3.103-1
2:3.105-1
2:3.105-2
2:3.106-1
2:3.107-1
2:3.108-1
2:3.109-1
2:3.110-1
2:3.111-1
2:3.112-1
2:3.114-1
2:3.116-1
2:3.117-1
2:3.119-1
2:3.120-1
2:3.121-1
2:3.123-1
2:3.123.1-1
2:3.124-1
2:3.126-1
2:3.127-1
2:3.128-1
Debian:13 / nss
Package
- Name
- nss
- Purl
- pkg:deb/debian/nss?arch=source&distro=trixie
Debian:14 / nss
Package
- Name
- nss
- Purl
- pkg:deb/debian/nss?arch=source&distro=forky