ALPINE-CVE-2023-5388

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2023-5388
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2023-5388.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2023-5388
Upstream
Published
2024-03-19T12:15:07.537Z
Modified
2025-12-03T22:47:27.398588Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CVSS Calculator
Summary
[none]
Details

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

References

Affected packages

Alpine:v3.19 / nss

Package

Name
nss
Purl
pkg:apk/alpine/nss?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.98-r0

Affected versions

3.*

3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r0
3.12.10-r0
3.12.11-r0
3.12.11-r1
3.13.1-r0
3.13.1-r1
3.13.3-r0
3.13.4-r0
3.13.4-r1
3.13.5-r0
3.13.6-r0
3.14-r0
3.14.1-r0
3.14.1.1.93-r0
3.14.3-r0
3.15.1-r0
3.15.1-r1
3.15.1-r2
3.15.2-r0
3.15.3-r0
3.15.3.1-r0
3.15.4-r0
3.15.5-r0
3.16-r0
3.16.1-r0
3.16.3-r0
3.17.1-r0
3.17.2-r0
3.17.3-r0
3.17.4-r0
3.18-r0
3.18.1-r0
3.19.2-r0
3.19.2-r1
3.20-r0
3.20.1-r0
3.21-r0
3.22-r0
3.22.1-r0
3.22.3-r0
3.23-r0
3.26-r0
3.27.1-r0
3.27.2-r0
3.28.1-r0
3.28.1-r1
3.30-r0
3.30-r1
3.30-r2
3.30.1-r0
3.31-r0
3.32-r0
3.33-r0
3.34-r0
3.34.1-r0
3.34.1-r1
3.36.1-r0
3.38-r0
3.38-r1
3.39-r0
3.41-r0
3.43-r0
3.43-r1
3.44-r0
3.45-r0
3.46-r0
3.46.1-r0
3.47-r0
3.47.1-r0
3.48-r0
3.49-r0
3.49.1-r0
3.49.2-r0
3.50-r0
3.51-r0
3.51.1-r0
3.52-r0
3.52.1-r0
3.53.1-r0
3.54-r0
3.55-r0
3.55-r1
3.57-r0
3.57-r1
3.58-r0
3.59-r0
3.60-r0
3.60.1-r0
3.61-r0
3.62-r0
3.63-r0
3.63-r1
3.64-r0
3.65-r0
3.66-r0
3.67-r0
3.68-r0
3.69-r0
3.69.1-r0
3.70-r0
3.71-r0
3.72-r0
3.73-r0
3.73.1-r0
3.75-r0
3.76-r0
3.76.1-r0
3.77-r0
3.78-r0
3.78.1-r0
3.79-r0
3.80-r0
3.81-r0
3.82-r0
3.83-r0
3.84-r0
3.84-r1
3.85-r0
3.86-r0
3.87-r0
3.88.1-r0
3.89-r0
3.89-r1
3.89.1-r0
3.89.1-r1
3.89.1-r2
3.90-r0
3.90-r1
3.91-r0
3.92-r0
3.93-r0
3.94-r0
3.97-r0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2023-5388.json"

Alpine:v3.20 / nss

Package

Name
nss
Purl
pkg:apk/alpine/nss?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.98-r0

Affected versions

3.*

3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r0
3.12.10-r0
3.12.11-r0
3.12.11-r1
3.13.1-r0
3.13.1-r1
3.13.3-r0
3.13.4-r0
3.13.4-r1
3.13.5-r0
3.13.6-r0
3.14-r0
3.14.1-r0
3.14.1.1.93-r0
3.14.3-r0
3.15.1-r0
3.15.1-r1
3.15.1-r2
3.15.2-r0
3.15.3-r0
3.15.3.1-r0
3.15.4-r0
3.15.5-r0
3.16-r0
3.16.1-r0
3.16.3-r0
3.17.1-r0
3.17.2-r0
3.17.3-r0
3.17.4-r0
3.18-r0
3.18.1-r0
3.19.2-r0
3.19.2-r1
3.20-r0
3.20.1-r0
3.21-r0
3.22-r0
3.22.1-r0
3.22.3-r0
3.23-r0
3.26-r0
3.27.1-r0
3.27.2-r0
3.28.1-r0
3.28.1-r1
3.30-r0
3.30-r1
3.30-r2
3.30.1-r0
3.31-r0
3.32-r0
3.33-r0
3.34-r0
3.34.1-r0
3.34.1-r1
3.36.1-r0
3.38-r0
3.38-r1
3.39-r0
3.41-r0
3.43-r0
3.43-r1
3.44-r0
3.45-r0
3.46-r0
3.46.1-r0
3.47-r0
3.47.1-r0
3.48-r0
3.49-r0
3.49.1-r0
3.49.2-r0
3.50-r0
3.51-r0
3.51.1-r0
3.52-r0
3.52.1-r0
3.53.1-r0
3.54-r0
3.55-r0
3.55-r1
3.57-r0
3.57-r1
3.58-r0
3.59-r0
3.60-r0
3.60.1-r0
3.61-r0
3.62-r0
3.63-r0
3.63-r1
3.64-r0
3.65-r0
3.66-r0
3.67-r0
3.68-r0
3.69-r0
3.69.1-r0
3.70-r0
3.71-r0
3.72-r0
3.73-r0
3.73.1-r0
3.75-r0
3.76-r0
3.76.1-r0
3.77-r0
3.78-r0
3.78.1-r0
3.79-r0
3.80-r0
3.81-r0
3.82-r0
3.83-r0
3.84-r0
3.84-r1
3.85-r0
3.86-r0
3.87-r0
3.88.1-r0
3.89-r0
3.89-r1
3.89.1-r0
3.89.1-r1
3.89.1-r2
3.90-r0
3.90-r1
3.91-r0
3.92-r0
3.93-r0
3.94-r0
3.96-r0
3.96.1-r0
3.97-r0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2023-5388.json"

Alpine:v3.21 / nss

Package

Name
nss
Purl
pkg:apk/alpine/nss?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.98-r0

Affected versions

3.*

3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r0
3.12.10-r0
3.12.11-r0
3.12.11-r1
3.13.1-r0
3.13.1-r1
3.13.3-r0
3.13.4-r0
3.13.4-r1
3.13.5-r0
3.13.6-r0
3.14-r0
3.14.1-r0
3.14.1.1.93-r0
3.14.3-r0
3.15.1-r0
3.15.1-r1
3.15.1-r2
3.15.2-r0
3.15.3-r0
3.15.3.1-r0
3.15.4-r0
3.15.5-r0
3.16-r0
3.16.1-r0
3.16.3-r0
3.17.1-r0
3.17.2-r0
3.17.3-r0
3.17.4-r0
3.18-r0
3.18.1-r0
3.19.2-r0
3.19.2-r1
3.20-r0
3.20.1-r0
3.21-r0
3.22-r0
3.22.1-r0
3.22.3-r0
3.23-r0
3.26-r0
3.27.1-r0
3.27.2-r0
3.28.1-r0
3.28.1-r1
3.30-r0
3.30-r1
3.30-r2
3.30.1-r0
3.31-r0
3.32-r0
3.33-r0
3.34-r0
3.34.1-r0
3.34.1-r1
3.36.1-r0
3.38-r0
3.38-r1
3.39-r0
3.41-r0
3.43-r0
3.43-r1
3.44-r0
3.45-r0
3.46-r0
3.46.1-r0
3.47-r0
3.47.1-r0
3.48-r0
3.49-r0
3.49.1-r0
3.49.2-r0
3.50-r0
3.51-r0
3.51.1-r0
3.52-r0
3.52.1-r0
3.53.1-r0
3.54-r0
3.55-r0
3.55-r1
3.57-r0
3.57-r1
3.58-r0
3.59-r0
3.60-r0
3.60.1-r0
3.61-r0
3.62-r0
3.63-r0
3.63-r1
3.64-r0
3.65-r0
3.66-r0
3.67-r0
3.68-r0
3.69-r0
3.69.1-r0
3.70-r0
3.71-r0
3.72-r0
3.73-r0
3.73.1-r0
3.75-r0
3.76-r0
3.76.1-r0
3.77-r0
3.78-r0
3.78.1-r0
3.79-r0
3.80-r0
3.81-r0
3.82-r0
3.83-r0
3.84-r0
3.84-r1
3.85-r0
3.86-r0
3.87-r0
3.88.1-r0
3.89-r0
3.89-r1
3.89.1-r0
3.89.1-r1
3.89.1-r2
3.90-r0
3.90-r1
3.91-r0
3.92-r0
3.93-r0
3.94-r0
3.96-r0
3.96.1-r0
3.97-r0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2023-5388.json"

Alpine:v3.22 / nss

Package

Name
nss
Purl
pkg:apk/alpine/nss?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.98-r0

Affected versions

3.*

3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r0
3.12.10-r0
3.12.11-r0
3.12.11-r1
3.13.1-r0
3.13.1-r1
3.13.3-r0
3.13.4-r0
3.13.4-r1
3.13.5-r0
3.13.6-r0
3.14-r0
3.14.1-r0
3.14.1.1.93-r0
3.14.3-r0
3.15.1-r0
3.15.1-r1
3.15.1-r2
3.15.2-r0
3.15.3-r0
3.15.3.1-r0
3.15.4-r0
3.15.5-r0
3.16-r0
3.16.1-r0
3.16.3-r0
3.17.1-r0
3.17.2-r0
3.17.3-r0
3.17.4-r0
3.18-r0
3.18.1-r0
3.19.2-r0
3.19.2-r1
3.20-r0
3.20.1-r0
3.21-r0
3.22-r0
3.22.1-r0
3.22.3-r0
3.23-r0
3.26-r0
3.27.1-r0
3.27.2-r0
3.28.1-r0
3.28.1-r1
3.30-r0
3.30-r1
3.30-r2
3.30.1-r0
3.31-r0
3.32-r0
3.33-r0
3.34-r0
3.34.1-r0
3.34.1-r1
3.36.1-r0
3.38-r0
3.38-r1
3.39-r0
3.41-r0
3.43-r0
3.43-r1
3.44-r0
3.45-r0
3.46-r0
3.46.1-r0
3.47-r0
3.47.1-r0
3.48-r0
3.49-r0
3.49.1-r0
3.49.2-r0
3.50-r0
3.51-r0
3.51.1-r0
3.52-r0
3.52.1-r0
3.53.1-r0
3.54-r0
3.55-r0
3.55-r1
3.57-r0
3.57-r1
3.58-r0
3.59-r0
3.60-r0
3.60.1-r0
3.61-r0
3.62-r0
3.63-r0
3.63-r1
3.64-r0
3.65-r0
3.66-r0
3.67-r0
3.68-r0
3.69-r0
3.69.1-r0
3.70-r0
3.71-r0
3.72-r0
3.73-r0
3.73.1-r0
3.75-r0
3.76-r0
3.76.1-r0
3.77-r0
3.78-r0
3.78.1-r0
3.79-r0
3.80-r0
3.81-r0
3.82-r0
3.83-r0
3.84-r0
3.84-r1
3.85-r0
3.86-r0
3.87-r0
3.88.1-r0
3.89-r0
3.89-r1
3.89.1-r0
3.89.1-r1
3.89.1-r2
3.90-r0
3.90-r1
3.91-r0
3.92-r0
3.93-r0
3.94-r0
3.96-r0
3.96.1-r0
3.97-r0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2023-5388.json"

Alpine:v3.23 / nss

Package

Name
nss
Purl
pkg:apk/alpine/nss?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.98-r0

Affected versions

3.*

3.12.6-r0
3.12.7-r0
3.12.8-r0
3.12.8-r1
3.12.8-r2
3.12.8-r3
3.12.8-r4
3.12.8-r5
3.12.8-r6
3.12.9-r0
3.12.10-r0
3.12.11-r0
3.12.11-r1
3.13.1-r0
3.13.1-r1
3.13.3-r0
3.13.4-r0
3.13.4-r1
3.13.5-r0
3.13.6-r0
3.14-r0
3.14.1-r0
3.14.1.1.93-r0
3.14.3-r0
3.15.1-r0
3.15.1-r1
3.15.1-r2
3.15.2-r0
3.15.3-r0
3.15.3.1-r0
3.15.4-r0
3.15.5-r0
3.16-r0
3.16.1-r0
3.16.3-r0
3.17.1-r0
3.17.2-r0
3.17.3-r0
3.17.4-r0
3.18-r0
3.18.1-r0
3.19.2-r0
3.19.2-r1
3.20-r0
3.20.1-r0
3.21-r0
3.22-r0
3.22.1-r0
3.22.3-r0
3.23-r0
3.26-r0
3.27.1-r0
3.27.2-r0
3.28.1-r0
3.28.1-r1
3.30-r0
3.30-r1
3.30-r2
3.30.1-r0
3.31-r0
3.32-r0
3.33-r0
3.34-r0
3.34.1-r0
3.34.1-r1
3.36.1-r0
3.38-r0
3.38-r1
3.39-r0
3.41-r0
3.43-r0
3.43-r1
3.44-r0
3.45-r0
3.46-r0
3.46.1-r0
3.47-r0
3.47.1-r0
3.48-r0
3.49-r0
3.49.1-r0
3.49.2-r0
3.50-r0
3.51-r0
3.51.1-r0
3.52-r0
3.52.1-r0
3.53.1-r0
3.54-r0
3.55-r0
3.55-r1
3.57-r0
3.57-r1
3.58-r0
3.59-r0
3.60-r0
3.60.1-r0
3.61-r0
3.62-r0
3.63-r0
3.63-r1
3.64-r0
3.65-r0
3.66-r0
3.67-r0
3.68-r0
3.69-r0
3.69.1-r0
3.70-r0
3.71-r0
3.72-r0
3.73-r0
3.73.1-r0
3.75-r0
3.76-r0
3.76.1-r0
3.77-r0
3.78-r0
3.78.1-r0
3.79-r0
3.80-r0
3.81-r0
3.82-r0
3.83-r0
3.84-r0
3.84-r1
3.85-r0
3.86-r0
3.87-r0
3.88.1-r0
3.89-r0
3.89-r1
3.89.1-r0
3.89.1-r1
3.89.1-r2
3.90-r0
3.90-r1
3.91-r0
3.92-r0
3.93-r0
3.94-r0
3.96-r0
3.96.1-r0
3.97-r0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2023-5388.json"