CVE-2017-7822 — Mozilla Firefox vulnerability

8 documents5 sources
Severity
5.3MEDIUMNVD
OSV9.8
EPSS
0.5%
top 36.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla FirefoxDebian Firefox
Timeline
PublishedJun 11
Latest updateMay 13

Description

The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox < 56.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages4 packages

▶debiandebian/firefox< firefox 56.0-1 (sid)
▶CVEListV5mozilla/firefoxunspecified — 56
▶Ubuntumozilla/firefox< 56.0+build6-0ubuntu0.14.04.1+4
▶NVDmozilla/firefox55.0.3

🔴Vulnerability Details

4
GHSA
GHSA-rhrf-cx66-4xf3: The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D↗2022-05-13
▶
OSV
firefox regression↗2017-10-04
▶
OSV
CVE-2017-7822: The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D↗2017-10-02
▶
OSV
firefox vulnerabilities↗2017-10-02
▶

📋Vendor Advisories

3
Ubuntu
Firefox regression↗2017-10-04
▶
Ubuntu
Firefox vulnerabilities↗2017-10-02
▶
Debian
CVE-2017-7822: firefox - The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should r...↗2017
▶