During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
{ "binaries": [ { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm7", "binary_name": "libnss3" }, { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm7", "binary_name": "libnss3-1d" }, { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm7", "binary_name": "libnss3-dev" }, { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm7", "binary_name": "libnss3-nssdb" }, { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm7", "binary_name": "libnss3-tools" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "80.0+build2-0ubuntu0.16.04.1", "binary_name": "firefox" }, { "binary_version": "80.0+build2-0ubuntu0.16.04.1", "binary_name": "firefox-dev" }, { "binary_version": "80.0+build2-0ubuntu0.16.04.1", "binary_name": "firefox-geckodriver" }, { "binary_version": "80.0+build2-0ubuntu0.16.04.1", "binary_name": "firefox-mozsymbols" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "2:3.28.4-0ubuntu0.16.04.13", "binary_name": "libnss3" }, { "binary_version": "2:3.28.4-0ubuntu0.16.04.13", "binary_name": "libnss3-1d" }, { "binary_version": "2:3.28.4-0ubuntu0.16.04.13", "binary_name": "libnss3-dev" }, { "binary_version": "2:3.28.4-0ubuntu0.16.04.13", "binary_name": "libnss3-nssdb" }, { "binary_version": "2:3.28.4-0ubuntu0.16.04.13", "binary_name": "libnss3-tools" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "80.0+build2-0ubuntu0.18.04.1", "binary_name": "firefox" }, { "binary_version": "80.0+build2-0ubuntu0.18.04.1", "binary_name": "firefox-dev" }, { "binary_version": "80.0+build2-0ubuntu0.18.04.1", "binary_name": "firefox-geckodriver" }, { "binary_version": "80.0+build2-0ubuntu0.18.04.1", "binary_name": "firefox-mozsymbols" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "2:3.35-2ubuntu2.11", "binary_name": "libnss3" }, { "binary_version": "2:3.35-2ubuntu2.11", "binary_name": "libnss3-dev" }, { "binary_version": "2:3.35-2ubuntu2.11", "binary_name": "libnss3-tools" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "80.0+build2-0ubuntu0.20.04.1", "binary_name": "firefox" }, { "binary_version": "80.0+build2-0ubuntu0.20.04.1", "binary_name": "firefox-dev" }, { "binary_version": "80.0+build2-0ubuntu0.20.04.1", "binary_name": "firefox-geckodriver" }, { "binary_version": "80.0+build2-0ubuntu0.20.04.1", "binary_name": "firefox-mozsymbols" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "2:3.49.1-1ubuntu1.4", "binary_name": "libnss3" }, { "binary_version": "2:3.49.1-1ubuntu1.4", "binary_name": "libnss3-dev" }, { "binary_version": "2:3.49.1-1ubuntu1.4", "binary_name": "libnss3-tools" } ], "availability": "No subscription required" }