--- title: "CVE-2010-3173\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2010-3173?format=md keywords: index, follow --- # CVE-2010-3173 Publication date 20 October 2010 Last updated 24 July 2024 --- Ubuntu priority **Low** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. [Read the notes from the security team](https://ubuntu.com/security/CVE-2010-3173?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | nspr | 10.10 maverick | Not affected | | 10.04 LTS lucid | Not affected | | 9.10 karmic | Not affected | | 9.04 jaunty | Not affected | | 8.04 LTS hardy | Not affected | | 6.06 LTS dapper | Not in release | | nss | 10.10 maverick | Fixed 3.12.8-0ubuntu0.10.10.1 | | 10.04 LTS lucid | Fixed 3.12.8-0ubuntu0.10.04.1 | | 9.10 karmic | Fixed 3.12.8-0ubuntu0.9.10.1 | | 9.04 jaunty | Fixed 3.12.8-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Fixed 3.12.8-0ubuntu0.8.04.1 | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) update merely enforces a stronger key length needs new NSPR ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3173) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2010-3173) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2010-3173) * [Debian](https://security-tracker.debian.org/tracker/CVE-2010-3173) ### Related Ubuntu Security Notices (USN) + [USN-1007-1](https://usn.ubuntu.com/USN-1007-1) + NSS vulnerabilities + 20 October 2010 ### Other references *