description: NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
problem types: Timing attack on DSA signatures in NSS library
affected:
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 68.9.0, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 77, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 68.9, status: affected, version: unspecified, versionType: custom
}
