Lucene search
HistoryDec 19, 2023 - 2:15 p.m.
CVE-2023-6135
nss
nist curves
side-channel attack
minerva
firefox
vulnerability
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
20.8%
Multiple NSS NIST curves were susceptible to a side-channel attack known as “Minerva”. This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.
Affected configurations
Node
mozillafirefoxRange<121.0
Related
prion
prion
Code injection
2023-12-19 14:15:00
redhat
redhat
(RHSA-2024:0786) Moderate: nss security update
2024-02-12 13:39:06
(RHSA-2024:0790) Moderate: nss security update
2024-02-12 16:31:35
(RHSA-2024:0791) Moderate: nss security update
2024-02-12 16:31:43
oraclelinux
oraclelinux
nss security update
2024-02-13 00:00:00
nss security update
2024-02-13 00:00:00
nss security update
2024-04-19 00:00:00
nessus
nessus
Amazon Linux 2 : nss-softokn (ALAS-2024-2456)
2024-02-19 00:00:00
RHEL 9 : nss (RHSA-2024:0790)
2024-02-12 00:00:00
Amazon Linux 2023 : nspr, nspr-devel, nss (ALAS2023-2024-523)
2024-02-20 00:00:00
debiancve
debiancve
CVE-2023-6135
2023-12-19 14:15:07
cve
cve
CVE-2023-6135
2023-12-19 14:15:07
alpinelinux
alpinelinux
CVE-2023-6135
2023-12-19 14:15:07
almalinux
almalinux
Moderate: nss security update
2024-02-12 00:00:00
Moderate: nss security update
2024-02-12 00:00:00
osv
osv
Moderate: nss security update
2024-03-12 15:41:47
Moderate: nss security update
2024-02-12 00:00:00
Moderate: nss security update
2024-02-12 00:00:00
amazon
amazon
Medium: nss-softokn
2024-02-15 03:52:00
ubuntucve
ubuntucve
CVE-2023-6135
2023-12-20 00:00:00
redhatcve
redhatcve
CVE-2023-6135
2024-01-11 09:00:57
rocky
rocky
nss security update
2024-03-12 15:41:47
cvelist
cvelist
CVE-2023-6135
2023-12-19 13:38:46
ubuntu
ubuntu
NSS regression
2024-04-11 00:00:00
NSS vulnerabilities
2024-04-10 00:00:00
Firefox regressions
2024-01-11 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6727-1)
2024-04-11 00:00:00
Ubuntu: Security Advisory (USN-6727-2)
2024-04-12 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-53, MFSA2023-56) - Windows
2023-12-21 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 121 — Mozilla
2023-12-19 00:00:00
kaspersky
kaspersky
KLA62517 Multiple vulnerabilities in Mozilla Firefox
2023-12-19 00:00:00
ibm
ibm
Security Bulletin: App Connect Enterprise Certified Container UBI updates
2024-03-07 14:53:54
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-04-24 19:15:42
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
20.8%
Related for NVD:CVE-2023-6135