CVE-2020-12399 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.4 MEDIUM	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 25%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 < 77.0
mozilla	firefox_esr	𝑥 < 68.9.0
mozilla	thunderbird	𝑥 < 68.9.0
debian	debian_linux	9.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

firefox

sid	132.0.1-1 fixed

firefox-esr

bookworm	115.14.0esr-1~deb12u1 fixed
bookworm (security)	128.4.0esr-1~deb12u1 fixed
bullseye	115.14.0esr-1~deb11u1 fixed
bullseye (security)	128.4.0esr-1~deb11u1 fixed
sid	128.4.0esr-1 fixed
trixie	128.3.1esr-2 fixed

nss

bookworm	2:3.87.1-1 fixed
bullseye	2:3.61-1+deb11u3 fixed
bullseye (security)	2:3.61-1+deb11u4 fixed
sid	2:3.105-2 fixed
trixie	2:3.105-2 fixed

thunderbird

bookworm	1:115.12.0-1~deb12u1 fixed
bookworm (security)	1:128.4.0esr-1~deb12u1 fixed
bullseye	1:115.12.0-1~deb11u1 fixed
bullseye (security)	1:128.4.0esr-1~deb11u1 fixed
sid	1:128.4.0esr-1 fixed
trixie	1:128.4.0esr-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

firefox

bionic	Fixed 77.0.1+build1-0ubuntu0.18.04.1 released
eoan	Fixed 77.0.1+build1-0ubuntu0.19.10.1 released
focal	Fixed 77.0.1+build1-0ubuntu0.20.04.1 released
trusty	dne
xenial	Fixed 77.0.1+build1-0ubuntu0.16.04.1 released

nss

bionic	Fixed 2:3.35-2ubuntu2.8 released
eoan	Fixed 2:3.45-1ubuntu2.3 released
focal	Fixed 2:3.49.1-1ubuntu1.1 released
trusty	Fixed 2:3.28.4-0ubuntu0.14.04.5+esm5 released
xenial	Fixed 2:3.28.4-0ubuntu0.16.04.11 released

thunderbird

bionic	Fixed 1:68.10.0+build1-0ubuntu0.18.04.1 released
eoan	Fixed 1:68.10.0+build1-0ubuntu0.19.10.1 released
focal	Fixed 1:68.10.0+build1-0ubuntu0.20.04.1 released
trusty	dne
xenial	Fixed 1:68.10.0+build1-0ubuntu0.16.04.1 released

openSUSE / SLES Releases

openSUSE Product

Release

libfreebl3

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

libfreebl3-32bit

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

libfreebl3-hmac

suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed

libfreebl3-hmac-32bit

suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed

libsoftokn3

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

libsoftokn3-32bit

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

libsoftokn3-hmac

suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed

libsoftokn3-hmac-32bit

suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed

mozilla-nspr

suse enterprise desktop 15 SP1	4.25-3.12.1 fixed
suse enterprise desktop 15 SP2	4.25-3.12.1 fixed
suse enterprise desktop 15 SP3	4.25-3.12.1 fixed
suse enterprise desktop 15 SP4	4.25-3.12.1 fixed
suse enterprise desktop 15 SP5	4.25-3.12.1 fixed
suse enterprise desktop 15 SP6	4.25-3.12.1 fixed
suse enterprise desktop 15 SP7	4.25-3.12.1 fixed
suse enterprise sap 12 SP3	4.25-19.15.1 fixed
suse enterprise sap 12 SP4	4.25-19.15.1 fixed
suse enterprise sap 12 SP5	4.25-19.15.1 fixed
suse enterprise sap 15 SP1	4.25-3.12.1 fixed
suse enterprise sap 15 SP2	4.25-3.12.1 fixed
suse enterprise sap 15 SP3	4.25-3.12.1 fixed
suse enterprise sap 15 SP4	4.25-3.12.1 fixed
suse enterprise sap 15 SP5	4.25-3.12.1 fixed
suse enterprise sap 15 SP6	4.25-3.12.1 fixed
suse enterprise sap 15 SP7	4.25-3.12.1 fixed
suse enterprise server 12 SP2	4.25-19.15.1 fixed
suse enterprise server 12 SP3	4.25-19.15.1 fixed
suse enterprise server 12 SP4	4.25-19.15.1 fixed
suse enterprise server 12 SP5	4.25-19.15.1 fixed
suse enterprise server 15	4.25-3.12.1 fixed
suse enterprise server 15 SP1	4.25-3.12.1 fixed
suse enterprise server 15 SP2	4.25-3.12.1 fixed
suse enterprise server 15 SP3	4.25-3.12.1 fixed
suse enterprise server 15 SP4	4.25-3.12.1 fixed
suse enterprise server 15 SP5	4.25-3.12.1 fixed
suse enterprise server 15 SP6	4.25-3.12.1 fixed
suse enterprise server 15 SP7	4.25-3.12.1 fixed

mozilla-nspr-32bit

suse enterprise desktop 15 SP1	4.25-3.12.1 fixed
suse enterprise desktop 15 SP2	4.25-3.12.1 fixed
suse enterprise desktop 15 SP3	4.25-3.12.1 fixed
suse enterprise desktop 15 SP4	4.25-3.12.1 fixed
suse enterprise desktop 15 SP5	4.25-3.12.1 fixed
suse enterprise desktop 15 SP6	4.25-3.12.1 fixed
suse enterprise desktop 15 SP7	4.25-3.12.1 fixed
suse enterprise sap 12 SP3	4.25-19.15.1 fixed
suse enterprise sap 12 SP4	4.25-19.15.1 fixed
suse enterprise sap 12 SP5	4.25-19.15.1 fixed
suse enterprise sap 15 SP1	4.25-3.12.1 fixed
suse enterprise sap 15 SP2	4.25-3.12.1 fixed
suse enterprise sap 15 SP3	4.25-3.12.1 fixed
suse enterprise sap 15 SP4	4.25-3.12.1 fixed
suse enterprise sap 15 SP5	4.25-3.12.1 fixed
suse enterprise sap 15 SP6	4.25-3.12.1 fixed
suse enterprise sap 15 SP7	4.25-3.12.1 fixed
suse enterprise server 12 SP2	4.25-19.15.1 fixed
suse enterprise server 12 SP3	4.25-19.15.1 fixed
suse enterprise server 12 SP4	4.25-19.15.1 fixed
suse enterprise server 12 SP5	4.25-19.15.1 fixed
suse enterprise server 15	4.25-3.12.1 fixed
suse enterprise server 15 SP1	4.25-3.12.1 fixed
suse enterprise server 15 SP2	4.25-3.12.1 fixed
suse enterprise server 15 SP3	4.25-3.12.1 fixed
suse enterprise server 15 SP4	4.25-3.12.1 fixed
suse enterprise server 15 SP5	4.25-3.12.1 fixed
suse enterprise server 15 SP6	4.25-3.12.1 fixed
suse enterprise server 15 SP7	4.25-3.12.1 fixed

mozilla-nspr-devel

suse enterprise desktop 15 SP1	4.25-3.12.1 fixed
suse enterprise desktop 15 SP2	4.25-3.12.1 fixed
suse enterprise desktop 15 SP3	4.25-3.12.1 fixed
suse enterprise desktop 15 SP4	4.25-3.12.1 fixed
suse enterprise desktop 15 SP5	4.25-3.12.1 fixed
suse enterprise desktop 15 SP6	4.25-3.12.1 fixed
suse enterprise desktop 15 SP7	4.25-3.12.1 fixed
suse enterprise sap 12 SP3	4.25-19.15.1 fixed
suse enterprise sap 12 SP4	4.25-19.15.1 fixed
suse enterprise sap 12 SP5	4.25-19.15.1 fixed
suse enterprise sap 15 SP1	4.25-3.12.1 fixed
suse enterprise sap 15 SP2	4.25-3.12.1 fixed
suse enterprise sap 15 SP3	4.25-3.12.1 fixed
suse enterprise sap 15 SP4	4.25-3.12.1 fixed
suse enterprise sap 15 SP5	4.25-3.12.1 fixed
suse enterprise sap 15 SP6	4.25-3.12.1 fixed
suse enterprise sap 15 SP7	4.25-3.12.1 fixed
suse enterprise server 12 SP3	4.25-19.15.1 fixed
suse enterprise server 12 SP4	4.25-19.15.1 fixed
suse enterprise server 12 SP5	4.25-19.15.1 fixed
suse enterprise server 15	4.25-3.12.1 fixed
suse enterprise server 15 SP1	4.25-3.12.1 fixed
suse enterprise server 15 SP2	4.25-3.12.1 fixed
suse enterprise server 15 SP3	4.25-3.12.1 fixed
suse enterprise server 15 SP4	4.25-3.12.1 fixed
suse enterprise server 15 SP5	4.25-3.12.1 fixed
suse enterprise server 15 SP6	4.25-3.12.1 fixed
suse enterprise server 15 SP7	4.25-3.12.1 fixed

mozilla-nss

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

mozilla-nss-32bit

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

mozilla-nss-certs

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

mozilla-nss-certs-32bit

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

mozilla-nss-devel

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

mozilla-nss-sysinit

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

mozilla-nss-sysinit-32bit

suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed

mozilla-nss-tools

suse enterprise desktop 15 SP1	3.53-3.40.1 fixed
suse enterprise desktop 15 SP2	3.53-3.40.1 fixed
suse enterprise desktop 15 SP3	3.53-3.40.1 fixed
suse enterprise desktop 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise desktop 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise desktop 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise desktop 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise sap 12 SP3	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP4	3.53.1-58.48.1 fixed
suse enterprise sap 12 SP5	3.53.1-58.48.1 fixed
suse enterprise sap 15 SP1	3.53-3.40.1 fixed
suse enterprise sap 15 SP2	3.53-3.40.1 fixed
suse enterprise sap 15 SP3	3.53-3.40.1 fixed
suse enterprise sap 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise sap 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise sap 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise sap 15 SP7	3.101.2-150400.3.54.1 fixed
suse enterprise server 12 SP2	3.53.1-58.48.1 fixed
suse enterprise server 12 SP3	3.53.1-58.48.1 fixed
suse enterprise server 12 SP4	3.53.1-58.48.1 fixed
suse enterprise server 12 SP5	3.53.1-58.48.1 fixed
suse enterprise server 15	3.53-3.40.1 fixed
suse enterprise server 15 SP1	3.53-3.40.1 fixed
suse enterprise server 15 SP2	3.53-3.40.1 fixed
suse enterprise server 15 SP3	3.53-3.40.1 fixed
suse enterprise server 15 SP4	3.68.3-150400.1.7 fixed
suse enterprise server 15 SP5	3.79.4-150400.3.29.1 fixed
suse enterprise server 15 SP6	3.90.2-150400.3.39.1 fixed
suse enterprise server 15 SP7	3.101.2-150400.3.54.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

nspr

RHEL 8	0:4.25.0-2.el8_2 fixed
RHEL 8.2 AUS	0:4.25.0-2.el8_2 fixed
RHEL 8.2 E4S	0:4.25.0-2.el8_2 fixed
RHEL 8.2 EUS	0:4.25.0-2.el8_2 fixed
RHEL 8.2 TUS	0:4.25.0-2.el8_2 fixed

nspr-devel

RHEL 8	0:4.25.0-2.el8_2 fixed
RHEL 8.2 AUS	0:4.25.0-2.el8_2 fixed
RHEL 8.2 E4S	0:4.25.0-2.el8_2 fixed
RHEL 8.2 EUS	0:4.25.0-2.el8_2 fixed
RHEL 8.2 TUS	0:4.25.0-2.el8_2 fixed

nss

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-devel

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-softokn

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-softokn-devel

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-softokn-freebl

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-softokn-freebl-devel

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-sysinit

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-tools

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-util

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

nss-util-devel

RHEL 8	0:3.53.1-11.el8_2 fixed
RHEL 8.2 AUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 E4S	0:3.53.1-11.el8_2 fixed
RHEL 8.2 EUS	0:3.53.1-11.el8_2 fixed
RHEL 8.2 TUS	0:3.53.1-11.el8_2 fixed

Common Weakness Enumeration

CWE-203 - Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1631576

https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html

https://security.gentoo.org/glsa/202007-49

https://usn.ubuntu.com/4421-1/

https://www.debian.org/security/2020/dsa-4726

https://www.mozilla.org/security/advisories/mfsa2020-20/

https://www.mozilla.org/security/advisories/mfsa2020-21/

https://www.mozilla.org/security/advisories/mfsa2020-22/