p PatchFirst

CVE-2020-12413

CVE-2020-12413

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support for DHE ciphersuites.

CVSS 5.9 · Medium · EPSS 0.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • firefox

    Versions
    • ≥ unspecified, < 78: Affected (custom)

    Update to 78

  • firefox esr

    Versions
    • ≥ unspecified, < 68.10: Affected (custom)

    Update to 68.10

  • nss Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:3.17-1

    Update to 2:3.17-1

  • nss Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:3.17-1

    Update to 2:3.17-1

  • nss Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:3.17-1

    Update to 2:3.17-1

Original sources

Check your server →