CVE-2023-5388

Description

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

References

https://www.mozilla.org/security/advisories/mfsa2024-14/

https://www.mozilla.org/security/advisories/mfsa2024-13/

https://www.mozilla.org/security/advisories/mfsa2024-12/

https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html

https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html

https://bugzilla.mozilla.org/show_bug.cgi?id=1780432

Details

Source: Mitre, NVD

Named Vulnerability: Marvin Attack

Risk Information

CVSS v2

CVSS v3

EPSS