An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result POINT_AT_INFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an incorrect shared secret. This vulnerability affects Firefox < 55.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox | Mozilla | * | 55.0 (excluding) |
| Firefox | Ubuntu | artful | * |
| Firefox | Ubuntu | bionic | * |
| Firefox | Ubuntu | cosmic | * |
| Firefox | Ubuntu | devel | * |
| Firefox | Ubuntu | disco | * |
| Firefox | Ubuntu | eoan | * |
| Firefox | Ubuntu | focal | * |
| Firefox | Ubuntu | groovy | * |
| Firefox | Ubuntu | hirsute | * |
| Firefox | Ubuntu | impish | * |
| Firefox | Ubuntu | jammy | * |
| Firefox | Ubuntu | kinetic | * |
| Firefox | Ubuntu | lunar | * |
| Firefox | Ubuntu | mantic | * |
| Firefox | Ubuntu | noble | * |
| Firefox | Ubuntu | trusty | * |
| Firefox | Ubuntu | upstream | * |
| Firefox | Ubuntu | xenial | * |
| Firefox | Ubuntu | zesty | * |
| Mozjs38 | Ubuntu | artful | * |
| Mozjs38 | Ubuntu | bionic | * |
| Mozjs38 | Ubuntu | esm-apps/bionic | * |
| Mozjs38 | Ubuntu | upstream | * |
| Mozjs38 | Ubuntu | zesty | * |
References
- http://www.securityfocus.com/bid/100383
- http://www.securitytracker.com/id/1039124
- https://bugzilla.mozilla.org/show_bug.cgi?id=1352039
- https://www.mozilla.org/security/advisories/mfsa2017-18/
- http://www.securityfocus.com/bid/100383
- http://www.securitytracker.com/id/1039124
- https://bugzilla.mozilla.org/show_bug.cgi?id=1352039
- https://www.mozilla.org/security/advisories/mfsa2017-18/