CVE-2017-7822 PUBLISHED

The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox < 56.

EPSS 0.61% · 69.7th percentile

Risk Scores

EPSS Score
0.61%
69.7th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSfirefox0
Ubuntu:14.04:LTSfirefox24.0+build1-0ubuntu1, 25.0+build3-0ubuntu0.13.10.1, 28.0~b2+build1-0ubuntu2
Ubuntu:16.04:LTSfirefox41.0.2+build2-0ubuntu1, 42.0+build2-0ubuntu1, 44.0+build3-0ubuntu2

Timeline

References

Open in Interactive Console →