Critical RSA Key Generation Vulnerability in NSS Package
Summary
ALPINE-CVE-2020-12402: During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. Affects nss versions < 3.53.1-r0. Fixed in 3.53.1-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The NSS (Network Security Services) package is a set of libraries designed to support the development of security-enabled client and server applications. It provides essential cryptographic services, including SSL/TLS protocols, and is widely used in various applications, including web browsers and servers. The NSS package is crucial for ensuring secure communications over networks, making its integrity vital for the security of applications that rely on it.
Vulnerability Detail
The vulnerability identified as CVE-2020-12402 arises during the RSA key generation process within the NSS package. It involves a flawed implementation of the Binary Extended Euclidean Algorithm, which exhibits input-dependent flow. This flaw can be exploited by attackers using electromagnetic side-channel attacks to capture traces that may lead to the recovery of secret prime numbers used in RSA keys. Although unmodified Firefox browsers do not generate RSA keys in normal operation and are not directly affected, products built on top of this library may be vulnerable, potentially compromising sensitive data.
How To Fix
Minimum fixed version
3.53.1-r0
This is the first release that contains the fix.
sudo apk add --upgrade nssTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, if updating the package is not immediately feasible, consider limiting the exposure of applications that utilize the NSS library, especially those that may generate RSA keys. Additionally, ensure that sensitive operations are conducted in secure environments to minimize the risk of side-channel attacks.
Conclusion
The CVE-2020-12402 vulnerability in the NSS package poses a significant risk due to its potential for exploitation through side-channel attacks during RSA key generation. It is crucial for users and developers to update to the patched version to ensure the security of their applications. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for nss →
FAQ
CVE-2020-12402 is a vulnerability in the NSS package that affects RSA key generation, allowing attackers to exploit side-channel attacks to recover secret primes.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of CVE-2020-12402 is 4.4, indicating a moderate severity level.
If immediate updates are not possible, limit the exposure of applications using NSS and conduct sensitive operations in secure environments as a temporary measure.
Versions of NSS prior to 3.53.1-r0 are affected by this vulnerability. Updating to the fixed version will mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for nss.
