Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-12387 State: PUBLISHED Published: 2020-05-26T17:04:56 Last Updated: 2024-08-04T11:56:51.542Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Use-after-free during worker shutdown Description: A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-18/ - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/m
/mfsa2020-18/ - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/mfsa2020-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1545345 - https://usn.ubuntu.com/4373-1/ - https://security.gentoo.org/glsa/202005-03 - https://security.gentoo.org/glsa/202005-04
CVE ID: CVE-2020-12388 State: PUBLISHED Published: 2020-05-26T17:04:19 Last Updated: 2024-08-04T11:56:51.615Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Sandbox escape with improperly guarded Access Tokens Description: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8 and Firefox < 76. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/mfsa2020-17/ - https://bugzilla.mozilla.org
curity/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/mfsa2020-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1618911 - http://packetstormsecurity.com/files/157860/Firefox-Default-Content-Process-DACL-Sandbox-Escape.html
CVE ID: CVE-2020-12389 State: PUBLISHED Published: 2020-05-26T17:03:50 Last Updated: 2024-08-04T11:56:51.831Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Sandbox escape with improperly separated process types Description: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8 and Firefox < 76. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/mfsa2020-17/ - https://bugzilla.mozilla.o
security/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/mfsa2020-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1554110
CVE ID: CVE-2020-12390 State: PUBLISHED Published: 2020-05-26T17:03:09 Last Updated: 2024-08-04T11:56:51.727Z Vendors: Mozilla Products: Firefox Problem Types: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses Description: Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1141959
CVE ID: CVE-2020-12391 State: PUBLISHED Published: 2020-05-26T17:02:35 Last Updated: 2024-08-04T11:56:51.888Z Vendors: Mozilla Products: Firefox Problem Types: Content-Security-Policy bypass using object elements Description: Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scripts that should have been blocked, albeit with a unique opaque origin. This vulnerability affects Firefox < 76. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1457100
CVE ID: CVE-2020-12392 State: PUBLISHED Published: 2020-05-26T17:01:54 Last Updated: 2024-08-04T11:56:51.781Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Arbitrary local file access with 'Copy as cURL' Description: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.m
, Firefox < 76, and Thunderbird < 68.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-18/ - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/mfsa2020-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1614468 - https://usn.ubuntu.com/4373-1/ - https://security.gentoo.org/glsa/202005-03 - https://security.gentoo.org/glsa/202005-04
CVE ID: CVE-2020-12393 State: PUBLISHED Published: 2020-05-26T17:01:15 Last Updated: 2024-08-04T11:56:51.649Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection Description: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. *Note: this issue only affects Firefox on Windows operating systems.*. This
injection and arbitrary command execution. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-18/ - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/mfsa2020-17/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1615471
CVE ID: CVE-2020-12394 State: PUBLISHED Published: 2020-05-26T17:00:25 Last Updated: 2024-08-04T11:56:52.053Z Vendors: Mozilla Products: Firefox Problem Types: URL spoofing in location bar when unfocussed Description: A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1628288 - https://security.gentoo.org/glsa/202005-04
CVE ID: CVE-2020-12395 State: PUBLISHED Published: 2020-05-26T16:58:58 Last Updated: 2024-08-04T11:56:51.802Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozill
efox < 76, and Thunderbird < 68.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-18/ - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://www.mozilla.org/security/advisories/mfsa2020-17/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1595886%2C1611482%2C1614704%2C1624098%2C1625749%2C1626382%2C1628076%2C1631508 - https://usn.ubuntu.com/4373-1/ - https://security.gentoo.org/glsa/202005-03 - https://security.gentoo.org/glsa/202005-04
CVE ID: CVE-2020-12396 State: PUBLISHED Published: 2020-05-26T16:58:24 Last Updated: 2024-08-04T11:56:52.035Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 76 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 76. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-16/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1339601%2C1611938%2C16204
mozilla.org/security/advisories/mfsa2020-16/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1339601%2C1611938%2C1620488%2C1622291%2C1627644 - https://security.gentoo.org/glsa/202005-04
CVE ID: CVE-2020-12397 State: PUBLISHED Published: 2020-05-22T18:57:12 Last Updated: 2024-08-04T11:56:52.038Z Vendors: Mozilla Products: Thunderbird Problem Types: Sender Email Address Spoofing using encoded Unicode characters Description: By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird < 68.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-18/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1617370 - https://usn.ubuntu.com/4373-1/ - https://security.gentoo.org/glsa/202005-03
CVE ID: CVE-2020-12398 State: PUBLISHED Published: 2020-07-09T14:45:35 Last Updated: 2024-08-04T11:56:52.019Z Vendors: Mozilla Products: Thunderbird Problem Types: Security downgrade with IMAP STARTTLS leads to information leakage Description: If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird < 68.9.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-22/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1613623 - https://u
ps://www.mozilla.org/security/advisories/mfsa2020-22/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1613623 - https://usn.ubuntu.com/4421-1/
CVE ID: CVE-2020-12399 State: PUBLISHED Published: 2020-07-09T14:52:16 Last Updated: 2024-08-04T11:56:51.648Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Timing attack on DSA signatures in NSS library Description: NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://www.mozilla.org/security/advisories/mfsa2020-21/ - https://www.mozilla.org/security/advisories/mfsa2020-22/
/ - https://www.mozilla.org/security/advisories/mfsa2020-21/ - https://www.mozilla.org/security/advisories/mfsa2020-22/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1631576 - https://www.debian.org/security/2020/dsa-4726 - https://usn.ubuntu.com/4421-1/ - https://security.gentoo.org/glsa/202007-49 - https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html
CVE ID: CVE-2020-12400 State: PUBLISHED Published: 2020-10-08T00:00:00 Last Updated: 2024-08-04T11:56:52.044Z Vendors: Mozilla Products: Firefox, Firefox for Android Problem Types: P-384 and P-521 vulnerable to a side channel attack on modular inversion Description: When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-39/ - https://www.mozilla.org/security/advisories/mfsa2020-36/ - https://b
/www.mozilla.org/security/advisories/mfsa2020-39/ - https://www.mozilla.org/security/advisories/mfsa2020-36/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1623116 - https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html
CVE ID: CVE-2020-12401 State: PUBLISHED Published: 2020-10-08T00:00:00 Last Updated: 2024-08-04T11:56:51.648Z Vendors: Mozilla Products: Firefox, Firefox for Android Problem Types: Timing-attack on ECDSA signature generation Description: During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-39/ - https://www.mozilla.org/security/advisories/mfsa2020-36/ - https://bugzil
mozilla.org/security/advisories/mfsa2020-39/ - https://www.mozilla.org/security/advisories/mfsa2020-36/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1631573 - https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html
CVE ID: CVE-2020-12402 State: PUBLISHED Published: 2020-07-09T14:53:22 Last Updated: 2024-08-04T11:56:51.801Z Vendors: Mozilla Products: Firefox Problem Types: RSA Key Generation vulnerable to side-channel attack Description: During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability af
generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-24/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1631597 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00018.html - https://usn.ubuntu.com/4417-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html - https://www.debian.org/security/2020/dsa-4726 - https://lists.fedoraproject.org/archives/list/package-announce%40list
- https://www.debian.org/security/2020/dsa-4726 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UWVDJRARXNWWWTCGMM63EXLQHH2LNOXO/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html - https://security.gentoo.org/glsa/202007-10 - https://usn.ubuntu.com/4417-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RFL6UNFK4MG2WDXLMLFAEIUSM5EUK7CG/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html
CVE ID: CVE-2020-12403 State: PUBLISHED Published: 2021-05-27T00:00:00 Last Updated: 2024-08-04T11:56:51.720Z Vendors: n/a Products: nss Problem Types: CWE-125 Description: A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1868931 - https://developer.
t Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1868931 - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes - https://lists.debian.org/debian-lts-announce/2023/02/msg00021.html - https://security.netapp.com/advisory/ntap-20230324-0006/
CVE ID: CVE-2020-12404 State: PUBLISHED Published: 2020-07-09T14:44:16 Last Updated: 2024-08-04T11:56:51.728Z Vendors: Mozilla Products: Firefox for iOS Problem Types: Native-to-JS bridging security token exploit Description: For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS < 26. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-19/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1631739
CVE ID: CVE-2020-12405 State: PUBLISHED Published: 2020-07-09T14:45:23 Last Updated: 2024-08-04T11:56:51.680Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Use-after-free in SharedWorkerService Description: When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://www.mozilla.org/security/advisories/mfsa2020-21/ - https://www.mozilla.org/security/advisories/mfsa2020-22/ - h
https://www.mozilla.org/security/advisories/mfsa2020-21/ - https://www.mozilla.org/security/advisories/mfsa2020-22/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1631618 - https://usn.ubuntu.com/4421-1/
CVE ID: CVE-2020-12406 State: PUBLISHED Published: 2020-07-09T14:45:21 Last Updated: 2024-08-04T11:56:51.745Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: JavaScript type confusion with NativeTypes Description: Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://www.mozilla.org/security/advisories/m
: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://www.mozilla.org/security/advisories/mfsa2020-21/ - https://www.mozilla.org/security/advisories/mfsa2020-22/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1639590 - https://usn.ubuntu.com/4421-1/
CVE ID: CVE-2020-12407 State: PUBLISHED Published: 2020-07-09T14:54:46 Last Updated: 2024-08-04T11:56:51.839Z Vendors: Mozilla Products: Firefox Problem Types: WebRender leaking GPU memory when using border-image CSS directive Description: Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observable from web content. This vulnerability affects Firefox < 77. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1637112
CVE ID: CVE-2020-12408 State: PUBLISHED Published: 2020-07-09T14:46:53 Last Updated: 2024-08-04T11:56:51.742Z Vendors: Mozilla Products: Firefox Problem Types: URL spoofing when using IP addresses Description: When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox < 77. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1623888
CVE ID: CVE-2020-12409 State: PUBLISHED Published: 2020-07-09T14:46:12 Last Updated: 2024-08-04T11:56:51.768Z Vendors: Mozilla Products: Firefox Problem Types: URL spoofing with unicode characters Description: When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This vulnerability affects Firefox < 77. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1629506
CVE ID: CVE-2020-12410 State: PUBLISHED Published: 2020-07-09T14:45:30 Last Updated: 2024-08-04T11:56:51.579Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 Description: Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisor
ox ESR < 68.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://www.mozilla.org/security/advisories/mfsa2020-21/ - https://www.mozilla.org/security/advisories/mfsa2020-22/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1619305%2C1632717 - https://usn.ubuntu.com/4421-1/
CVE ID: CVE-2020-12411 State: PUBLISHED Published: 2020-07-09T14:46:14 Last Updated: 2024-08-04T11:56:51.878Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 77 Description: Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 77. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-20/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1620972%2C1625333
CVE ID: CVE-2020-12412 State: PUBLISHED Published: 2020-07-09T14:47:46 Last Updated: 2024-08-04T11:56:52.061Z Vendors: Mozilla Products: Firefox Problem Types: Address bar spoof using history navigation and blocked ports Description: By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2019-34/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1528587
CVE ID: CVE-2020-12413 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T15:23:18.811Z Vendors: Mozilla Products: Firefox, Firefox ESR Problem Types: Timing Attack on DHE Ciphersuites Description: The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support for DHE ciphersuites. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://raccoon-attack.com/ - https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2020-12413