PT-2017-17940 · Mozilla+2 · Firefox+2

Antonio Sanso · Publicado 2017-08-08 · Atualizado 2024-12-12 · CVE-2017-7781

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 55

Description An error in the elliptic curve point addition algorithm can yield an incorrect result, potentially allowing a man-in-the-middle attacker to interfere with a connection and cause the attacked party to compute an incorrect shared secret.

Recommendations For versions prior to 55, update to version 55 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

ALT-PU-2017-2060

ALT-PU-2018-1854

CVE-2017-7781

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

USN-3391-1

USN-3391-2

USN-3391-3

Produtos afetados

Alt Linux

Firefox

Ubuntu

Referências · 1904

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1352039 · Exploit
• https://suse.com/security/cve/CVE-2023-25728 · Nota
• https://suse.com/security/cve/CVE-2022-31743 · Nota
• https://suse.com/security/cve/CVE-2018-12392 · Nota
• https://suse.com/security/cve/CVE-2024-5698 · Nota
• https://suse.com/security/cve/CVE-2013-1701 · Nota
• https://suse.com/security/cve/CVE-2024-5687 · Nota
• https://suse.com/security/cve/CVE-2022-24713 · Nota
• https://suse.com/security/cve/CVE-2014-8642 · Nota
• https://suse.com/security/cve/CVE-2015-4516 · Nota
• https://suse.com/security/cve/CVE-2019-11716 · Nota
• https://suse.com/security/cve/CVE-2023-28176 · Nota
• https://suse.com/security/cve/CVE-2021-38494 · Nota
• https://suse.com/security/cve/CVE-2012-1965 · Nota
• https://suse.com/security/cve/CVE-2013-1687 · Nota