/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-jx3g-34f8-cg42

Published

Last updated

https://images.chainguard.dev/security/CGA-jx3g-34f8-cg42
Package

firefox

RepositoryWolfi
Latest Update
Not affected
Aliases
  • CVE-2011-3389
  • GHSA-rhch-pcq2-7gp3

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2011-3389

Updates

Status

Not affected

Justification

Vulnerable code not present

Impact

Firefox claimed on September 27, 2011 that Firefox itself is not vulnerable to this attack. While Firefox does use TLS 1.0 (the version of TLS with this weakness), the technical details of the attack require the ability to completely control the content of connections originating in the browser which Firefox does not allow. More details can be found here: https://blog.mozilla.org/security/2011/09/27/attack-against-tls-protected-communications/

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing