{"action":"Upgrade nss to 3.12.8-1 or later.","affected":[{"fixed":"3.12.8-1","introduced":"0"}],"component":"nss","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["3.12.8-1"],"id":"tcs_01M5N9KRXPGDMDESTPP8A1FD6B","modified_at":"2026-10-23T17:47:42.153637366Z","published_at":"2010-10-21T19:00:02.583Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2010-3173","https://security-tracker.debian.org/tracker/CVE-2010-3173"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2010-3173#Debian:13/nss","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2010-3173"}],"summary":"The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key lengt"}