VDB

DEBIAN-CVE-2016-9074

DEBIAN-CVE-2016-9074 PUBLISHED CVSS 5.900000095367432 MEDIUM

An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Risk Scores

CVSS v3.0
5.900000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Debian:13nss0, 0, 0
Debian:12nss0, 0, 0
Debian:14nss0, 0, 0
Debian:12firefox-esr0, 0, 0
Debian:11nss0, 0, 0
Debian:11firefox-esr0, 0, 0
Debian:14firefox-esr0, 0, 0
Debian:13firefox-esr0, 0, 0

Timeline

  • Jun 11, 2018 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›