CVE-2020-12401
First published: Fri Jun 26 2020(Updated: )
A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.
Credit: security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/nspr | <0:4.25.0-2.el7_9 | 0:4.25.0-2.el7_9 |
| redhat/nss | <0:3.53.1-3.el7_9 | 0:3.53.1-3.el7_9 |
| redhat/nss-softokn | <0:3.53.1-6.el7_9 | 0:3.53.1-6.el7_9 |
| redhat/nss-util | <0:3.53.1-1.el7_9 | 0:3.53.1-1.el7_9 |
| redhat/nss | <0:3.53.1-17.el8_3 | 0:3.53.1-17.el8_3 |
| Mozilla Firefox | <80.0 | |
| Mozilla Firefox | <80.0 | |
| All of | ||
| Mozilla Firefox | =80 | |
| Google Android | ||
| Mozilla Firefox | <80 | 80 |
| redhat/nss | <3.55 | 3.55 |
Remedy
This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=1631573
- https://www.mozilla.org/en-US/security/advisories/mfsa2020-39/
- https://www.mozilla.org/en-US/security/advisories/mfsa2020-36/
- https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html
- https://www.mozilla.org/security/advisories/mfsa2020-36/
- https://www.mozilla.org/security/advisories/mfsa2020-39/
- https://access.redhat.com/security/cve/CVE-2020-6829
- https://hg.mozilla.org/projects/nss/rev/aeb2e583ee957a699d949009c7ba37af76515c20
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1862393
- https://access.redhat.com/errata/RHSA-2020:4076
- https://access.redhat.com/security/cve/cve-2020-12401
- https://bugzilla.redhat.com/show_bug.cgi?id=1851294
- https://www.cve.org/CVERecord?id=CVE-2020-12401 https://nvd.nist.gov/vuln/detail/CVE-2020-12401 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes
- https://access.redhat.com/errata/RHSA-2021:0538
Parent vulnerabilities
(Appears in the following advisories)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is CVE-2020-12401?
CVE-2020-12401 is a vulnerability that allows an attacker to extract partial information about the ECDSA nonce during ECDSA signature generation.
How does CVE-2020-12401 affect Mozilla Firefox?
Mozilla Firefox version 80 is affected by CVE-2020-12401.
How does CVE-2020-12401 affect Google Android?
Google Android is affected by CVE-2020-12401.
What is the severity of CVE-2020-12401?
CVE-2020-12401 has a severity rating of medium, with a CVSS score of 4.4.
How can CVE-2020-12401 be fixed?
To fix CVE-2020-12401, it is recommended to update to Mozilla Firefox version 80 or apply the appropriate security patches released by the vendor.
- collector/redhat-cve
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- collector/mozilla-advisory
- agent/software-canonical-lookup-request
- agent/references
- agent/remedy
- agent/weakness
- agent/author
- agent/severity
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-12401
- agent/software-canonical-lookup
- agent/event
- source/Mozilla
- agent/softwarecombine
- agent/description
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- package-manager/redhat
- vendor/mozilla
- canonical/mozilla firefox
- version/mozilla firefox/80
- vendor/google
- canonical/google android