CVE-2020-12402
Medium
Description
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.
SeverityMedium
CVSS4.4
Exploit probability—
Product
Mozilla Firefox
PublishedJul 9, 2020
First seenJul 9, 2020
How to fix
Update
- mozilla firefox78.0 or later
Vendor advisories
- usn.ubuntu.com/4417-1/
- debian.org/security/2020/dsa-4726
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UWVDJRARXNWWWTCGMM63EXLQHH2LNOXO/
- security.gentoo.org/glsa/202007-10
- usn.ubuntu.com/4417-2/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RFL6UNFK4MG2WDXLMLFAEIUSM5EUK7CG/
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla firefox | v < 78.0 | 78.0 |
| fedoraproject fedora | 32 | — |
| opensuse leap | 15.1, 15.2 | — |
| debian debian_linux | 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.