PT-2023-7972

CVE-2023-6135

·

Publicado

2023-12-19

·

Atualizado

2026-08-24

Descrição por

CVSS 2.0
6.4
Média
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 121
Description The issue is related to a side-channel attack known as "Minerva" that affects multiple NSS NIST curves, potentially allowing an attacker to recover the private key. This could lead to the disclosure of confidential information. The attack can be exploited by a remote attacker.
Recommendations For versions prior to 121, update to version 121 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ALSA-2024:0786
ALSA-2024:0790
ALT-PU-2023-8231
ALT-PU-2024-13898
ALT-PU-2024-15839
ALT-PU-2024-15840
CESA-2024_0786
ECHO-BE87-B95E-603F
OESA-2025-1322
OESA-2025-1323
OPENSUSE-SU-2024:13531-1
OPENSUSE-SU-2024:14572-1
RHSA-2024:0785
RHSA-2024:0786
RHSA-2024_0786
RHSA-2024:0790
RHSA-2024_0790
RHSA-2024:0791
RLSA-2024:0786
USN-6562-1
USN-6562-2
USN-6727-1
USN-6727-2
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾