Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-15656 (GCVE-0-2020-15656)
Vulnerability from cvelistv5 – Published: 2020-08-10 17:43 – Updated: 2024-08-04 13:22- Type confusion for special arguments in IonMonkey
| URL | Tags |
|---|---|
| https://www.mozilla.org/security/advisories/mfsa2… | x_refsource_MISC |
| https://www.mozilla.org/security/advisories/mfsa2… | x_refsource_MISC |
| https://www.mozilla.org/security/advisories/mfsa2… | x_refsource_MISC |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1647293 | x_refsource_MISC |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| https://usn.ubuntu.com/4443-1/ | vendor-advisoryx_refsource_UBUNTU |
| Vendor | Product | Version | |
|---|---|---|---|
| Mozilla | Firefox ESR |
Affected:
unspecified , < 78.1
(custom)
|
|
| Mozilla | Firefox |
Affected:
unspecified , < 79
(custom)
|
|
| Mozilla | Thunderbird |
Affected:
unspecified , < 78.1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T13:22:30.577Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
},
{
"name": "openSUSE-SU-2020:1189",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
},
{
"name": "USN-4443-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4443-1/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Firefox ESR",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "78.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Firefox",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "79",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Thunderbird",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "78.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Type confusion for special arguments in IonMonkey",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-08-18T13:06:14.000Z",
"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"shortName": "mozilla"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
},
{
"name": "openSUSE-SU-2020:1189",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
},
{
"name": "USN-4443-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4443-1/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2020-15656",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Firefox ESR",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "78.1"
}
]
}
},
{
"product_name": "Firefox",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "79"
}
]
}
},
{
"product_name": "Thunderbird",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "78.1"
}
]
}
}
]
},
"vendor_name": "Mozilla"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Type confusion for special arguments in IonMonkey"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-30/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-32/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-33/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
},
{
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293",
"refsource": "MISC",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
},
{
"name": "openSUSE-SU-2020:1189",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
},
{
"name": "USN-4443-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4443-1/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"assignerShortName": "mozilla",
"cveId": "CVE-2020-15656",
"datePublished": "2020-08-10T17:43:23.000Z",
"dateReserved": "2020-07-10T00:00:00.000Z",
"dateUpdated": "2024-08-04T13:22:30.577Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2020-15656",
"date": "2026-05-20",
"epss": "0.00695",
"percentile": "0.72118"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"79.0\", \"matchCriteriaId\": \"89415068-6F07-4D38-9BE8-EAC175A310DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"78.1\", \"matchCriteriaId\": \"E1B90123-60A0-407C-BCCD-083FA3FEECCC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"78.1\", \"matchCriteriaId\": \"B31A7BCE-C606-43F5-ABAA-F76B75BFDF3C\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B009C22E-30A4-4288-BCF6-C3E81DEAF45A\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\", \"matchCriteriaId\": \"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"902B8056-9E37-443B-8905-8AA93E2447FB\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.\"}, {\"lang\": \"es\", \"value\": \"Las optimizaciones JIT que involucran el objeto de argumentos de Javascript podr\\u00edan confundir optimizaciones posteriores. Este riesgo ya fue mitigado por varias precauciones en el c\\u00f3digo, resultando en este error calificado con una severidad moderada. Esta vulnerabilidad afecta a Firefox ESR versiones anteriores a 78.1, Firefox versiones anteriores a 79 y Thunderbird versiones anteriores a 78.1\"}]",
"id": "CVE-2020-15656",
"lastModified": "2024-11-21T05:05:57.413",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:C/I:C/A:C\", \"baseScore\": 9.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.6, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2020-08-10T18:15:12.547",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html\", \"source\": \"security@mozilla.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1647293\", \"source\": \"security@mozilla.org\", \"tags\": [\"Issue Tracking\", \"Permissions Required\", \"Vendor Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4443-1/\", \"source\": \"security@mozilla.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2020-30/\", \"source\": \"security@mozilla.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2020-32/\", \"source\": \"security@mozilla.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2020-33/\", \"source\": \"security@mozilla.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1647293\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Permissions Required\", \"Vendor Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4443-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2020-30/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2020-32/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2020-33/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "security@mozilla.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-843\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-15656\",\"sourceIdentifier\":\"security@mozilla.org\",\"published\":\"2020-08-10T18:15:12.547\",\"lastModified\":\"2024-11-21T05:05:57.413\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.\"},{\"lang\":\"es\",\"value\":\"Las optimizaciones JIT que involucran el objeto de argumentos de Javascript podr\u00edan confundir optimizaciones posteriores. Este riesgo ya fue mitigado por varias precauciones en el c\u00f3digo, resultando en este error calificado con una severidad moderada. Esta vulnerabilidad afecta a Firefox ESR versiones anteriores a 78.1, Firefox versiones anteriores a 79 y Thunderbird versiones anteriores a 78.1\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"79.0\",\"matchCriteriaId\":\"89415068-6F07-4D38-9BE8-EAC175A310DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"78.1\",\"matchCriteriaId\":\"E1B90123-60A0-407C-BCCD-083FA3FEECCC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"78.1\",\"matchCriteriaId\":\"B31A7BCE-C606-43F5-ABAA-F76B75BFDF3C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B009C22E-30A4-4288-BCF6-C3E81DEAF45A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"902B8056-9E37-443B-8905-8AA93E2447FB\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1647293\",\"source\":\"security@mozilla.org\",\"tags\":[\"Issue Tracking\",\"Permissions Required\",\"Vendor Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4443-1/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2020-30/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2020-32/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2020-33/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1647293\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Permissions Required\",\"Vendor Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4443-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2020-30/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2020-32/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2020-33/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
CERTFR-2020-AVI-470
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 79",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 68.11",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox iOS versions ant\u00e9rieures \u00e0 28",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 78.1",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-15649",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15649"
},
{
"name": "CVE-2020-15651",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15651"
},
{
"name": "CVE-2020-15662",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15662"
},
{
"name": "CVE-2020-15652",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15652"
},
{
"name": "CVE-2020-6463",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6463"
},
{
"name": "CVE-2020-15654",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15654"
},
{
"name": "CVE-2020-15657",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15657"
},
{
"name": "CVE-2020-15650",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15650"
},
{
"name": "CVE-2020-15659",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15659"
},
{
"name": "CVE-2020-6514",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6514"
},
{
"name": "CVE-2020-15653",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15653"
},
{
"name": "CVE-2020-15661",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15661"
},
{
"name": "CVE-2020-15658",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15658"
},
{
"name": "CVE-2020-15655",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15655"
},
{
"name": "CVE-2020-15656",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15656"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-470",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-07-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Mozilla Firefox.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code\narbitraire \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-34 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-34/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-31 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-31/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-32 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-32/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-30 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-30/"
}
]
}
CERTFR-2020-AVI-471
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 78.1 |
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 78.1",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-15652",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15652"
},
{
"name": "CVE-2020-6463",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6463"
},
{
"name": "CVE-2020-15654",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15654"
},
{
"name": "CVE-2020-15657",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15657"
},
{
"name": "CVE-2020-15659",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15659"
},
{
"name": "CVE-2020-6514",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6514"
},
{
"name": "CVE-2020-15653",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15653"
},
{
"name": "CVE-2020-15658",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15658"
},
{
"name": "CVE-2020-15655",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15655"
},
{
"name": "CVE-2020-15656",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15656"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-471",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-07-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Mozilla\nThunderbird. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une\nex\u00e9cution de code arbitraire \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Thunderbird",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-33 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-33/"
}
]
}
CERTFR-2020-AVI-470
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 79",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 68.11",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox iOS versions ant\u00e9rieures \u00e0 28",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 78.1",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-15649",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15649"
},
{
"name": "CVE-2020-15651",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15651"
},
{
"name": "CVE-2020-15662",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15662"
},
{
"name": "CVE-2020-15652",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15652"
},
{
"name": "CVE-2020-6463",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6463"
},
{
"name": "CVE-2020-15654",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15654"
},
{
"name": "CVE-2020-15657",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15657"
},
{
"name": "CVE-2020-15650",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15650"
},
{
"name": "CVE-2020-15659",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15659"
},
{
"name": "CVE-2020-6514",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6514"
},
{
"name": "CVE-2020-15653",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15653"
},
{
"name": "CVE-2020-15661",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15661"
},
{
"name": "CVE-2020-15658",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15658"
},
{
"name": "CVE-2020-15655",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15655"
},
{
"name": "CVE-2020-15656",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15656"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-470",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-07-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Mozilla Firefox.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code\narbitraire \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-34 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-34/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-31 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-31/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-32 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-32/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-30 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-30/"
}
]
}
CERTFR-2020-AVI-471
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 78.1 |
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 78.1",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-15652",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15652"
},
{
"name": "CVE-2020-6463",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6463"
},
{
"name": "CVE-2020-15654",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15654"
},
{
"name": "CVE-2020-15657",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15657"
},
{
"name": "CVE-2020-15659",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15659"
},
{
"name": "CVE-2020-6514",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6514"
},
{
"name": "CVE-2020-15653",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15653"
},
{
"name": "CVE-2020-15658",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15658"
},
{
"name": "CVE-2020-15655",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15655"
},
{
"name": "CVE-2020-15656",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15656"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-471",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-07-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Mozilla\nThunderbird. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une\nex\u00e9cution de code arbitraire \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Thunderbird",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2020-33 du 28 juillet 2020",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-33/"
}
]
}
BDU:2021-00080
Vulnerability from fstec - Published: 10.08.2020{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Novell Inc., Mozilla Corp., \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb, \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16.04 LTS (Ubuntu), 9 (Debian GNU/Linux), 18.04 LTS (Ubuntu), 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), 8 (Debian GNU/Linux), 10 (Debian GNU/Linux), 20.04 LTS (Ubuntu), 15.2 (OpenSUSE Leap), \u0434\u043e 79 (Firefox), \u0434\u043e 78.1 (Firefox ESR), \u0434\u043e 78.1 (Thunderbird), - (\u0410\u043b\u044c\u0442 8 \u0421\u041f), \u0434\u043e 16.01.2023 (\u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Firefox:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 79.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Firefox-ESR:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 78.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Thunderbird:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 78.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Debian:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 firefox) \u0434\u043e 79.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 firefox-esr) \u0434\u043e 78.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 thunderbird) \u0434\u043e 78.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Astra Linux:\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20201207SE16MD\n\u0418\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210730SE16\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Novell Inc.:\nhttps://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/notices/USN-4443-1\n\n\u0414\u043b\u044f \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f thunderbird \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1:91.13.0+repack-1~deb10u1.osnova1.strelets\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f firefox-esr \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 91.13.0esr+repack-1~deb10u1.osnova1.strelets\n\n\u0414\u043b\u044f \u041e\u0421 \u0410\u043b\u044c\u0442 8 \u0421\u041f: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "10.08.2020",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "16.09.2024",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.01.2021",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2021-00080",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2020-15656",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu, Debian GNU/Linux, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), OpenSUSE Leap, Firefox, Firefox ESR, Thunderbird, \u0410\u043b\u044c\u0442 8 \u0421\u041f (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Canonical Ltd. Ubuntu 16.04 LTS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , Canonical Ltd. Ubuntu 18.04 LTS , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , Canonical Ltd. Ubuntu 20.04 LTS , Novell Inc. OpenSUSE Leap 15.2 , \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 8 \u0421\u041f - (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb \u0434\u043e 16.01.2023 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c JIT-\u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u0435\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0442\u0438\u043f\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0435 \u0442\u0438\u043f\u044b (CWE-843)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c JIT-\u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u0435\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0442\u0438\u043f\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293\nhttps://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-15656\nhttps://security-tracker.debian.org/tracker/CVE-2020-15656\nhttps://ubuntu.com/security/notices/USN-4443-1\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20201207SE16MD\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16\nhttps://www.mozilla.org/security/advisories/mfsa2020-30/\nhttps://www.mozilla.org/security/advisories/mfsa2020-32/\nhttps://www.mozilla.org/security/advisories/mfsa2020-33/\nhttps://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023\nhttps://altsp.su/obnovleniya-bezopasnosti/",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-843",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,3)"
}
CNVD-2020-43758
Vulnerability from cnvd - Published: 2020-08-03目前厂商已发布升级补丁以修复漏洞,补丁获取链接: https://www.mozilla.org/en-US/security/advisories/mfsa2020-30/
| Name | ['Mozilla Firefox <79', 'Mozilla Firefox ESR <78.1', 'Mozilla Thunderbird <78.1'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2020-15656",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-15656"
}
},
"description": "Mozilla Firefox\u7b49\u90fd\u662f\u7f8e\u56fdMozilla\u57fa\u91d1\u4f1a\u7684\u4ea7\u54c1\u3002Mozilla Firefox\u662f\u4e00\u6b3e\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002Mozilla Firefox ESR\u662fFirefox(Web\u6d4f\u89c8\u5668)\u7684\u4e00\u4e2a\u5ef6\u957f\u652f\u6301\u7248\u672c\u3002Mozilla Thunderbird\u662f\u4e00\u5957\u4eceMozilla Application Suite\u72ec\u7acb\u51fa\u6765\u7684\u7535\u5b50\u90ae\u4ef6\u5ba2\u6237\u7aef\u8f6f\u4ef6\u3002\n\nMozilla Firefox 79\u4e4b\u524d\u7248\u672c\u3001Firefox ESR 78.1\u4e4b\u524d\u7248\u672c\u548cThunderbird 78.1\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u7f51\u7ad9\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2020-30/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2020-43758",
"openTime": "2020-08-03",
"patchDescription": "Mozilla Firefox\u7b49\u90fd\u662f\u7f8e\u56fdMozilla\u57fa\u91d1\u4f1a\u7684\u4ea7\u54c1\u3002Mozilla Firefox\u662f\u4e00\u6b3e\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002Mozilla Firefox ESR\u662fFirefox(Web\u6d4f\u89c8\u5668)\u7684\u4e00\u4e2a\u5ef6\u957f\u652f\u6301\u7248\u672c\u3002Mozilla Thunderbird\u662f\u4e00\u5957\u4eceMozilla Application Suite\u72ec\u7acb\u51fa\u6765\u7684\u7535\u5b50\u90ae\u4ef6\u5ba2\u6237\u7aef\u8f6f\u4ef6\u3002\r\n\r\nMozilla Firefox 79\u4e4b\u524d\u7248\u672c\u3001Firefox ESR 78.1\u4e4b\u524d\u7248\u672c\u548cThunderbird 78.1\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u7f51\u7ad9\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Mozilla Firefox\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2020-43758\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Mozilla Firefox \u003c79",
"Mozilla Firefox ESR \u003c78.1",
"Mozilla Thunderbird \u003c78.1"
]
},
"referenceLink": "https://usn.ubuntu.com/4443-1/",
"serverity": "\u4e2d",
"submitTime": "2020-08-01",
"title": "Mozilla Firefox\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2020-43758\uff09"
}
FKIE_CVE-2020-15656
Vulnerability from fkie_nvd - Published: 2020-08-10 18:15 - Updated: 2024-11-21 05:05| Vendor | Product | Version | |
|---|---|---|---|
| mozilla | firefox | * | |
| mozilla | firefox_esr | * | |
| mozilla | thunderbird | * | |
| opensuse | leap | 15.2 | |
| canonical | ubuntu_linux | 16.04 | |
| canonical | ubuntu_linux | 18.04 | |
| canonical | ubuntu_linux | 20.04 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"matchCriteriaId": "89415068-6F07-4D38-9BE8-EAC175A310DF",
"versionEndExcluding": "79.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E1B90123-60A0-407C-BCCD-083FA3FEECCC",
"versionEndExcluding": "78.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B31A7BCE-C606-43F5-ABAA-F76B75BFDF3C",
"versionEndExcluding": "78.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B009C22E-30A4-4288-BCF6-C3E81DEAF45A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1."
},
{
"lang": "es",
"value": "Las optimizaciones JIT que involucran el objeto de argumentos de Javascript podr\u00edan confundir optimizaciones posteriores. Este riesgo ya fue mitigado por varias precauciones en el c\u00f3digo, resultando en este error calificado con una severidad moderada. Esta vulnerabilidad afecta a Firefox ESR versiones anteriores a 78.1, Firefox versiones anteriores a 79 y Thunderbird versiones anteriores a 78.1"
}
],
"id": "CVE-2020-15656",
"lastModified": "2024-11-21T05:05:57.413",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-08-10T18:15:12.547",
"references": [
{
"source": "security@mozilla.org",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
},
{
"source": "security@mozilla.org",
"tags": [
"Issue Tracking",
"Permissions Required",
"Vendor Advisory"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
},
{
"source": "security@mozilla.org",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4443-1/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Permissions Required",
"Vendor Advisory"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4443-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
}
],
"sourceIdentifier": "security@mozilla.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-843"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-CWWW-4CWR-37PH
Vulnerability from github – Published: 2022-05-24 17:25 – Updated: 2023-02-03 00:30JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.
{
"affected": [],
"aliases": [
"CVE-2020-15656"
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2020-08-10T18:15:00Z",
"severity": "HIGH"
},
"details": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"id": "GHSA-cwww-4cwr-37ph",
"modified": "2023-02-03T00:30:18Z",
"published": "2022-05-24T17:25:12Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15656"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4443-1"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2020-15656
Vulnerability from gsd - Updated: 2023-12-13 01:21{
"GSD": {
"alias": "CVE-2020-15656",
"description": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"id": "GSD-2020-15656",
"references": [
"https://www.suse.com/security/cve/CVE-2020-15656.html",
"https://access.redhat.com/errata/RHSA-2020:4080",
"https://access.redhat.com/errata/RHSA-2020:3559",
"https://access.redhat.com/errata/RHSA-2020:3557",
"https://access.redhat.com/errata/RHSA-2020:3555",
"https://ubuntu.com/security/CVE-2020-15656",
"https://security.archlinux.org/CVE-2020-15656",
"https://linux.oracle.com/cve/CVE-2020-15656.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2020-15656"
],
"details": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"id": "GSD-2020-15656",
"modified": "2023-12-13T01:21:43.525754Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2020-15656",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Firefox ESR",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "78.1"
}
]
}
},
{
"product_name": "Firefox",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "79"
}
]
}
},
{
"product_name": "Thunderbird",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "78.1"
}
]
}
}
]
},
"vendor_name": "Mozilla"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Type confusion for special arguments in IonMonkey"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-30/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-32/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-33/",
"refsource": "MISC",
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
},
{
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293",
"refsource": "MISC",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
},
{
"name": "openSUSE-SU-2020:1189",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
},
{
"name": "USN-4443-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4443-1/"
}
]
}
},
"mozilla.org": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2020-15656"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Thunderbird",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "78.1"
}
]
}
},
{
"product_name": "Firefox",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "79"
}
]
}
},
{
"product_name": "Firefox ESR",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "78.1"
}
]
}
}
]
},
"vendor_name": "Mozilla"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "JIT optimizations involving the Javascript \u003ccode\u003earguments\u003c/code\u003e object could confuse later optimizations.\nThis risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Thunderbird \u003c 78.1, Firefox \u003c 79, and Firefox ESR \u003c 78.1."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Type confusion for special arguments in IonMonkey"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "78.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "78.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "79.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "security@mozilla.org",
"ID": "CVE-2020-15656"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-843"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-32/",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
},
{
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293",
"refsource": "MISC",
"tags": [
"Issue Tracking",
"Permissions Required",
"Vendor Advisory"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1647293"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-30/",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
},
{
"name": "https://www.mozilla.org/security/advisories/mfsa2020-33/",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
},
{
"name": "openSUSE-SU-2020:1189",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
},
{
"name": "USN-4443-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4443-1/"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2023-02-02T22:19Z",
"publishedDate": "2020-08-10T18:15Z"
}
}
}
OPENSUSE-SU-2020:1147-1
Vulnerability from csaf_opensuse - Published: 2020-08-05 07:40 - Updated: 2020-08-05 07:40| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox fixes the following issues:\n\n- Firefox Extended Support Release 78.1.0 ESR\n * Fixed: Various stability, functionality, and security fixes (bsc#1174538)\n * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker\n * CVE-2020-6514: WebRTC data channel leaks internal address to peer\n * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy\n * CVE-2020-15653: Bypassing iframe sandbox when allowing popups\n * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture\n * CVE-2020-15656: Type confusion for special arguments in IonMonkey\n * CVE-2020-15658: Overriding file type when saving to disk\n * CVE-2020-15657: DLL hijacking due to incorrect loading path\n * CVE-2020-15654: Custom cursor can overlay user interface\n * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-1147",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1147-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:1147-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5DGEDDAZOZ3MVQ6CTQDOF3OY2ZULXYVT/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:1147-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5DGEDDAZOZ3MVQ6CTQDOF3OY2ZULXYVT/"
},
{
"category": "self",
"summary": "SUSE Bug 1174538",
"url": "https://bugzilla.suse.com/1174538"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15652 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15653 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15654 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15655 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15656 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15657 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15658 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15659 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6463 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6514 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6514/"
}
],
"title": "Security update for MozillaFirefox",
"tracking": {
"current_release_date": "2020-08-05T07:40:10Z",
"generator": {
"date": "2020-08-05T07:40:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:1147-1",
"initial_release_date": "2020-08-05T07:40:10Z",
"revision_history": [
{
"date": "2020-08-05T07:40:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"product": {
"name": "MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"product_id": "MozillaFirefox-78.1.0-lp151.2.61.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"product": {
"name": "MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"product_id": "MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"product": {
"name": "MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"product_id": "MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"product": {
"name": "MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"product_id": "MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"product_id": "MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64",
"product_id": "MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-78.1.0-lp151.2.61.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64"
},
"product_reference": "MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64"
},
"product_reference": "MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64"
},
"product_reference": "MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-15652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15652"
}
],
"notes": [
{
"category": "general",
"text": "By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox \u003c 79, Firefox ESR \u003c 68.11, Firefox ESR \u003c 78.1, Thunderbird \u003c 68.11, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15652",
"url": "https://www.suse.com/security/cve/CVE-2020-15652"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15652",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-15652"
},
{
"cve": "CVE-2020-15653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15653"
}
],
"notes": [
{
"category": "general",
"text": "An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15653",
"url": "https://www.suse.com/security/cve/CVE-2020-15653"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15653",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-15653"
},
{
"cve": "CVE-2020-15654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15654"
}
],
"notes": [
{
"category": "general",
"text": "When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15654",
"url": "https://www.suse.com/security/cve/CVE-2020-15654"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15654",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-15654"
},
{
"cve": "CVE-2020-15655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15655"
}
],
"notes": [
{
"category": "general",
"text": "A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15655",
"url": "https://www.suse.com/security/cve/CVE-2020-15655"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15655",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-15655"
},
{
"cve": "CVE-2020-15656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15656"
}
],
"notes": [
{
"category": "general",
"text": "JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15656",
"url": "https://www.suse.com/security/cve/CVE-2020-15656"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15656",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-15656"
},
{
"cve": "CVE-2020-15657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15657"
}
],
"notes": [
{
"category": "general",
"text": "Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15657",
"url": "https://www.suse.com/security/cve/CVE-2020-15657"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15657",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-15657"
},
{
"cve": "CVE-2020-15658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15658"
}
],
"notes": [
{
"category": "general",
"text": "The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15658",
"url": "https://www.suse.com/security/cve/CVE-2020-15658"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15658",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-15658"
},
{
"cve": "CVE-2020-15659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15659"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 79, Firefox ESR \u003c 68.11, Firefox ESR \u003c 78.1, Thunderbird \u003c 68.11, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15659",
"url": "https://www.suse.com/security/cve/CVE-2020-15659"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15659",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-15659"
},
{
"cve": "CVE-2020-6463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6463"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6463",
"url": "https://www.suse.com/security/cve/CVE-2020-6463"
},
{
"category": "external",
"summary": "SUSE Bug 1171975 for CVE-2020-6463",
"url": "https://bugzilla.suse.com/1171975"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-6463",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2020-6463"
},
{
"cve": "CVE-2020-6514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6514"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6514",
"url": "https://www.suse.com/security/cve/CVE-2020-6514"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6514",
"url": "https://bugzilla.suse.com/1174189"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-6514",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:MozillaFirefox-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-branding-upstream-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-buildsymbols-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-devel-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-common-78.1.0-lp151.2.61.1.x86_64",
"openSUSE Leap 15.1:MozillaFirefox-translations-other-78.1.0-lp151.2.61.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-08-05T07:40:10Z",
"details": "important"
}
],
"title": "CVE-2020-6514"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.