Not rated
CVE-2020-12400 When converting coordinates from projective to affine, the modular inversion was not performed in constant time,…
Description
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 80 | earliest → < 80 | 80 |
| Firefox for Android 80 | earliest → < 80 | 80 |
References
- www.mozilla.org www.mozilla.org
- www.mozilla.org www.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- [debian-lts-announce] 20230220 [SECURITY] [DLA 3327-1] nss security update lists.debian.org
Timeline
- Published
- Last modified