CVE-2017-7822: Medium severity firefox vulnerability
Last updated 24 July 2024
Other sources
The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2017-7822?
CVE-2017-7822 is a vulnerability in the AES-GCM implementation in the WebCrypto API in Firefox < 56 that allows for the authentication key to be determined in some instances.
How does CVE-2017-7822 affect Firefox?
CVE-2017-7822 affects Firefox versions < 56.
What is the severity of CVE-2017-7822?
CVE-2017-7822 has a severity score of 5.3, which is considered medium.
How do I fix CVE-2017-7822 in Firefox?
Update Firefox to version 56 or later to fix CVE-2017-7822.
Where can I find more information about CVE-2017-7822?
You can find more information about CVE-2017-7822 in the Mozilla bugzilla and security advisories.