https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 21:29:53 +0000 https://vulnerability.circl.lu/vuln/cve-2020-12402 <p><strong>Affected:</strong> Mozilla Firefox</p> <p>During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox &lt; 78.</p> <p><strong>Affected:</strong> Mozilla Firefox</p> <p>During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox &lt; 78.</p> https://vulnerability.circl.lu/vuln/cve-2020-12402 https://vulnerability.circl.lu/vuln/usn-4417-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nss, Ubuntu:18.04:LTS: nss, Ubuntu:20.04:LTS: nss</p> <p>Cesar Pereida, Billy Bob Brumley, Yuval Yarom, and Nicola Tuveri discovered that NSS incorrectly handled RSA key generation. A local attacker could possibly use this issue to perform a timing attack and recover RSA keys.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nss, Ubuntu:18.04:LTS: nss, Ubuntu:20.04:LTS: nss</p> <p>Cesar Pereida, Billy Bob Brumley, Yuval Yarom, and Nicola Tuveri discovered that NSS incorrectly handled RSA key generation. A local attacker could possibly use this issue to perform a timing attack and recover RSA keys.</p> https://vulnerability.circl.lu/vuln/usn-4417-1