CVE-2020-12413

2023-02-1600:00:00

mozilla

www.cve.org

raccoon attack

dhe ciphersuites

tls

firefox

vulnerability

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

51.3%

JSON

The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support for DHE ciphersuites.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Firefox",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "78",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Mozilla",
    "product": "Firefox ESR",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "68.10",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]