DEBIAN-CVE-2010-3173

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2010-3173
Downstream
DSA-2123-1
Published: 21 Oct 2010, 19:00
Last modified:28 Apr 2026, 20:11

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Oct 2010, 19:00
Published
Vulnerability first disclosed
28 Apr 2026, 20:11
Last Modified
Vulnerability information updated

Description

The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

Affected Systems

  • debian•nss

    < 3.12.8-1 | < 3.12.8-1 | < 3.12.8-1 | < 3.12.8-1

References (1)