Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-5388 EUVD-2023-57703GHSA-g2hf-9hjx-2rxj

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to reco…

Published Mar 19, 2024 · Updated Nov 4, 2025 · Assigned by mozilla

Description

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 124 124
Mozilla Firefox ESR unspecified – < 115.9 115.9
Mozilla Thunderbird unspecified – < 115.9 115.9

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 firefox-esr 115.9.0esr-1 —
Debian 14 nss 2:3.98-1 —
Debian 14 thunderbird 1:115.9.0-1 —
Debian 13 firefox-esr 115.9.0esr-1 —
Debian 13 nss 2:3.98-1 —
Debian 13 thunderbird 1:115.9.0-1 —
Debian 12 firefox-esr 115.9.0esr-1~deb12u1 DSA-5643-1
Debian 12 nss No fix yet —
Debian 12 thunderbird 1:115.9.0-1~deb12u1 DSA-5644-1
Debian 11 firefox-esr 115.9.0esr-1~deb11u1 DSA-5643-1
Debian 11 thunderbird 1:115.9.0-1~deb11u1 DSA-5644-1
Debian 10 firefox-esr 115.9.1esr-1~deb10u1 DLA-3775-1
Debian 10 nss 2:3.42.1-1+deb10u8 DLA-3757-1
Debian 10 thunderbird 1:115.9.0-1~deb10u1 DLA-3769-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS mozjs102 No fix yet —
Ubuntu 22.04 LTS mozjs78 +2 No fix yet —
Ubuntu 22.04 LTS nss 2:3.98-0ubuntu0.22.04.1 USN-6727-1
Ubuntu 22.04 LTS thunderbird 1:115.9.0+build1-0ubuntu0.22.04.1 USN-6717-1
Ubuntu 20.04 LTS firefox 124.0+build1-0ubuntu0.20.04.1 USN-6703-1
Ubuntu 20.04 LTS mozjs52 +1 No fix yet —
Ubuntu 20.04 LTS nss 2:3.98-0ubuntu0.20.04.1 USN-6727-1
Ubuntu 20.04 LTS thunderbird 1:115.9.0+build1-0ubuntu0.20.04.1 USN-6717-1
Ubuntu 18.04 LTS mozjs38 +1 No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS nss No fix yet —
Ubuntu Pro 16.04 LTS nss No fix yet —
Ubuntu Pro 14.04 LTS nss No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 firefox +1 115.9.1-1.el9_3 RHSA-2024:1485
RHEL 9 nspr +1 4.35.0-4.el9_3 RHSA-2024:0108
RHEL 9 nss +9 3.90.0-4.el9_3 RHSA-2024:0108
RHEL 9 thunderbird 115.9.0-1.el9_3 RHSA-2024:1493
RHEL 8 firefox 115.9.1-1.el8_9 RHSA-2024:1484
RHEL 8 nss +9 3.90.0-4.el8_9 RHSA-2024:0105
RHEL 8 thunderbird 115.9.0-1.el8_9 RHSA-2024:1494
RHEL 7 firefox 115.9.1-1.el7_9 RHSA-2024:1486
RHEL 7 thunderbird 115.9.0-1.el7_9 RHSA-2024:1498
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.2 EUS firefox +1 115.9.1-1.el9_2 RHSA-2024:1483
RHEL 9.2 EUS nspr +1 4.35.0-4.el9_2 RHSA-2024:0107
RHEL 9.2 EUS nss +9 3.90.0-4.el9_2 RHSA-2024:0107
RHEL 9.2 EUS thunderbird 115.9.0-1.el9_2 RHSA-2024:1492
RHEL 9.0 EUS firefox 115.9.1-1.el9_0 RHSA-2024:1487
RHEL 9.0 EUS thunderbird 115.9.0-1.el9_0 RHSA-2024:1495
RHEL 8.8 EUS firefox 115.9.1-1.el8_8 RHSA-2024:1488
RHEL 8.8 EUS nss +9 3.90.0-4.el8_8 RHSA-2024:0093
RHEL 8.8 EUS thunderbird 115.9.0-1.el8_8 RHSA-2024:1496
RHEL 8.6 EUS firefox 115.9.1-1.el8_6 RHSA-2024:1489
RHEL 8.6 EUS nss +9 3.79.0-12.el8_6 RHSA-2024:0106
RHEL 8.6 EUS thunderbird 115.9.0-1.el8_6 RHSA-2024:1497
RHEL 8.4 TUS firefox 115.9.1-1.el8_4 RHSA-2024:1491
RHEL 8.4 TUS thunderbird 115.9.0-1.el8_4 RHSA-2024:1499
RHEL 8.4 E4S firefox 115.9.1-1.el8_4 RHSA-2024:1491
RHEL 8.4 E4S thunderbird 115.9.0-1.el8_4 RHSA-2024:1499
RHEL 8.4 AUS firefox 115.9.1-1.el8_4 RHSA-2024:1491
RHEL 8.4 AUS thunderbird 115.9.0-1.el8_4 RHSA-2024:1499
RHEL 8.2 TUS firefox 115.9.1-1.el8_2 RHSA-2024:1490
RHEL 8.2 TUS thunderbird 115.9.0-1.el8_2 RHSA-2024:1500
RHEL 8.2 E4S firefox 115.9.1-1.el8_2 RHSA-2024:1490
RHEL 8.2 E4S thunderbird 115.9.0-1.el8_2 RHSA-2024:1500
RHEL 8.2 AUS firefox 115.9.1-1.el8_2 RHSA-2024:1490
RHEL 8.2 AUS thunderbird 115.9.0-1.el8_2 RHSA-2024:1500

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 firefox +1 115.9.1-1.el9_3.alma.1 ALSA-2024:1485
AlmaLinux 9 nspr +1 4.35.0-4.el9_3 ALSA-2024:0108
AlmaLinux 9 nss +9 3.90.0-4.el9_3 ALSA-2024:0108
AlmaLinux 9 thunderbird 115.9.0-1.el9_3.alma.1 ALSA-2024:1493
AlmaLinux 8 firefox 115.9.1-1.el8_9.alma.1 ALSA-2024:1484
AlmaLinux 8 nss +9 3.90.0-4.el8_9 ALSA-2024:0105
AlmaLinux 8 thunderbird 115.9.0-1.el8_9.alma.1 ALSA-2024:1494

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 firefox 115.9.1-1.el8_9 RLSA-2024:1484
Rocky Linux 8 nss 3.90.0-4.el8_9 RLSA-2024:0105
Rocky Linux 8 thunderbird 115.9.0-1.el8_9 RLSA-2024:1494
ReleasePackageFixed inAdvisory
SLES 15 SP6 mozilla-nss 3.101.2-150400.3.48.1 SUSE-RU-2024:2684-1
SLES 15 SP5 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLES 15 SP5 MozillaThunderbird 115.9.0-150200.8.154.1 SUSE-SU-2024:1147-1
SLES 15 SP5 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SLES 15 SP4 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLES 15 SP4 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SLES 15 SP3 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLES 15 SP3 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
SLES 15 SP2 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLES 15 SP2 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 MozillaFirefox 115.9.0-112.203.2 SUSE-SU-2024:0971-1
SLES 12 SP5 mozilla-nss 3.90.2-58.111.1 SUSE-SU-2024:0578-1, SUSE-RU-2024:2564-1
SLES for SAP 15 SP4 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLES for SAP 15 SP4 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SLES for SAP 15 SP3 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLES for SAP 15 SP3 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
SLES for SAP 15 SP2 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLES for SAP 15 SP2 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
SLES for SAP 12 SP5 MozillaFirefox 115.9.0-112.203.2 SUSE-SU-2024:0971-1
SLES for SAP 12 SP5 mozilla-nss 3.90.2-58.111.1 SUSE-SU-2024:0578-1, SUSE-RU-2024:2564-1
SLE Micro 6.0 mozilla-nss 3.101.2-1.1 SUSE-SU-2025:20030-1
SLE Micro 5.5 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SLE Micro 5.4 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SLE Micro 5.3 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SLE Micro 5.2 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
SLE Micro 5.1 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
SLE HPC 15 SP4 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLE HPC 15 SP4 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SLE HPC 15 SP3 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLE HPC 15 SP3 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
SLE HPC 15 SP2 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SLE HPC 15 SP2 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
SUSE Manager Server 4.3 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SUSE Manager Proxy 4.3 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
SUSE Enterprise Storage 7.1 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
SUSE Enterprise Storage 7.1 mozilla-nss 3.90.2-150000.3.108.1 SUSE-SU-2024:2600-1, SUSE-SU-2024:0579-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 124.0.1-1.1 openSUSE-SU-2024:13795-1
openSUSE Tumbleweed MozillaThunderbird 115.9.0-1.1 openSUSE-SU-2024:13789-1
openSUSE Tumbleweed firefox-esr 128.5.1-1.1 openSUSE-SU-2024:14572-1
openSUSE Tumbleweed mozilla-nss 3.98-1.1 openSUSE-SU-2024:13793-1
openSUSE Leap 15.6 mozilla-nss 3.101.2-150400.3.48.1 SUSE-RU-2024:2684-1
openSUSE Leap 15.5 MozillaFirefox 115.9.1-150200.152.131.1 SUSE-SU-2024:1002-1
openSUSE Leap 15.5 MozillaThunderbird 115.9.0-150200.8.154.1 SUSE-SU-2024:1147-1
openSUSE Leap 15.5 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1, SUSE-RU-2024:2684-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.5 mozilla-nss 3.101.2-150400.3.48.1 SUSE-RU-2024:2684-1
openSUSE Leap Micro 5.4 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1
openSUSE Leap Micro 5.3 mozilla-nss 3.90.2-150400.3.39.1 SUSE-SU-2024:0597-1
ReleasePackageFixed inAdvisory
Alpine v3.24 nss 3.98-r0 —
Alpine v3.23 nss 3.98-r0 —
Alpine v3.22 nss 3.98-r0 —
Alpine v3.21 nss 3.98-r0 —
Alpine v3.20 nss 3.98-r0 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 firefox-esr 115.9.0-r0 —
Alpine v3.19 nss 3.98-r0 —
Alpine v3.18 firefox-esr 115.9.0-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 nspr +1 4.35.0-5.amzn2023.0.4 ALAS2023-2024-492
Amazon Linux 2023 nss +10 3.90.0-3.amzn2023.0.4 ALAS2023-2024-492
Amazon Linux 2 nss-softokn +3 3.90.0-6.amzn2.0.1 ALAS2-2024-2419

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 firefox +1 115.9.1-1.0.1.el9_3 ELSA-2024-1485
Oracle Linux 9 nspr +1 4.35.0-4.el9_3 ELSA-2024-0108
Oracle Linux 9 nss +9 3.90.0-4.el9_3 ELSA-2024-0108
Oracle Linux 9 thunderbird 115.9.0-1.0.1.el9_3 ELSA-2024-1493
Oracle Linux 8 firefox 115.9.1-1.0.1.el8_9 ELSA-2024-1484
Oracle Linux 8 nss +9 3.90.0-4.el8_9 ELSA-2024-0105
Oracle Linux 8 thunderbird 115.9.0-1.0.1.el8_9 ELSA-2024-1494
Oracle Linux 7 firefox 115.9.1-1.0.1.el7_9 ELSA-2024-1486
Oracle Linux 7 thunderbird 115.9.0-1.0.1.el7_9 ELSA-2024-1498

Advisories 50

References