TI-2020-09921 CVE-2020-12403 · GHSA-9h25-47mw-52hh
Out-of-bounds read in nss
Priority MEDIUM 42
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55.
RHSA-2021:0538
nss security and bug fix update
Released 2021-02-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) nss-3.53.1-17.el8_3, nss-devel-3.53.1-17.el8_3, nss-softokn-3.53.1-17.el8_3 +7
Fixes 4 records
TI-2020-05538 CVE-2020-6829 · GHSA-cc99-55qg-f87r
When performing EC scalar point multiplication, the wNAF point multiplication algorithm…
Priority LOW 27
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation.
TI-2020-09919 CVE-2020-12401 · GHSA-cm2q-67xf-jw8c
Observable discrepancy in Mozilla Firefox
Priority LOW 22
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data.
TI-2020-09918 CVE-2020-12400 · GHSA-38vr-4p57-8h9g
Observable discrepancy in Mozilla Firefox
Priority LOW 21
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack.