PT-2023-7972

CVE-2023-6135

·

تاريخ النشر

2023-12-19

·

تاريخ التحديث

2026-08-24

الوصف من

CVSS 2.0
6.4
متوسطة
المقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 121
Description The issue is related to a side-channel attack known as "Minerva" that affects multiple NSS NIST curves, potentially allowing an attacker to recover the private key. This could lead to the disclosure of confidential information. The attack can be exploited by a remote attacker.
Recommendations For versions prior to 121, update to version 121 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALSA-2024:0786
ALSA-2024:0790
ALT-PU-2023-8231
ALT-PU-2024-13898
ALT-PU-2024-15839
ALT-PU-2024-15840
CESA-2024_0786
ECHO-BE87-B95E-603F
OESA-2025-1322
OESA-2025-1323
OPENSUSE-SU-2024:13531-1
OPENSUSE-SU-2024:14572-1
RHSA-2024:0785
RHSA-2024:0786
RHSA-2024_0786
RHSA-2024:0790
RHSA-2024_0790
RHSA-2024:0791
RLSA-2024:0786
USN-6562-1
USN-6562-2
USN-6727-1
USN-6727-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾