Lucene search
Ubuntu.comUB:CVE-2020-6819HistoryApr 03, 2020 - 12:00 a.m.
CVE-2020-6819
2020-04-0300:00:00
ubuntu.com
ubuntu.com
25
0.024 Low
EPSS
Percentile
89.8%
Under certain conditions, when running the nsDocShell destructor, a race
condition can cause a use-after-free. We are aware of targeted attacks in
the wild abusing this flaw. This vulnerability affects Thunderbird <
68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | firefox | < 74.0.1+build1-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 19.10 | noarch | firefox | < 74.0.1+build1-0ubuntu0.19.10.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | firefox | < 75.0+build3-0ubuntu1 | UNKNOWN |
| ubuntu | 16.04 | noarch | firefox | < 74.0.1+build1-0ubuntu0.16.04.1 | UNKNOWN |
| ubuntu | 18.04 | noarch | thunderbird | < 1:68.7.0+build1-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 19.10 | noarch | thunderbird | < 1:68.7.0+build1-0ubuntu0.19.10.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | thunderbird | < 1:68.7.0+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 16.04 | noarch | thunderbird | < 1:68.7.0+build1-0ubuntu0.16.04.2 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2020-6819
nvd.nist.gov/vuln/detail/CVE-2020-6819
security-tracker.debian.org/tracker/CVE-2020-6819
ubuntu.com/security/notices/USN-4317-1
ubuntu.com/security/notices/USN-4328-1
ubuntu.com/security/notices/USN-4335-1
www.cve.org/CVERecord?id=CVE-2020-6819
www.mozilla.org/en-US/security/advisories/mfsa2020-11/#CVE-2020-6819
Related
ibm
ibm
alpinelinux
alpinelinux
CVE-2020-6819
2020-04-24 16:15:13
veracode
veracode
Denial Of Service (DoS)
2020-04-08 00:44:27
cisa_kev
cisa_kev
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
2021-11-03 00:00:00
cvelist
cvelist
CVE-2020-6819
2020-04-24 15:56:56
debiancve
debiancve
CVE-2020-6819
2020-04-24 16:15:13
cve
cve
CVE-2020-6819
2020-04-24 16:15:13
nvd
nvd
CVE-2020-6819
2020-04-24 16:15:13
redhatcve
redhatcve
CVE-2020-6819
2020-04-04 12:05:29
prion
prion
Race condition
2020-04-24 16:15:00
attackerkb
attackerkb
CVE-2020-6819
2020-04-24 00:00:00
nessus
nessus
Oracle Linux 8 : firefox (ELSA-2020-1341)
2020-04-10 00:00:00
SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:0928-1)
2020-04-07 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-2020-461)
2020-04-07 00:00:00
redhat
redhat
(RHSA-2020:1340) Critical: firefox security update
2020-04-07 07:05:11
(RHSA-2020:1339) Critical: firefox security update
2020-04-07 07:39:52
(RHSA-2020:1341) Critical: firefox security update
2020-04-07 07:43:50
mageia
mageia
Updated firefox packages fix security vulnerabilities
2020-04-05 20:07:15
Updated thunderbird packages fix security vulnerabilities
2020-04-15 13:12:14
openvas
openvas
Slackware: Security Advisory (SSA:2020-094-01)
2022-04-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:14337-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2020-0161)
2022-01-28 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 74.0.1 and Firefox ESR 68.6.1 — Mozilla
2020-04-03 00:00:00
Security Vulnerabilities fixed in Thunderbird 68.7.0 — Mozilla
2020-04-09 00:00:00
oraclelinux
oraclelinux
firefox security update
2020-04-09 00:00:00
firefox security update
2020-04-11 00:00:00
firefox security update
2020-07-07 00:00:00
kaspersky
kaspersky
KLA11712 Multiple vulnerabilities in Mozilla Firefox ESR
2020-04-03 00:00:00
KLA11711 Multiple vulnerabilities in Mozilla Firefox
2020-04-03 00:00:00
KLA11730 Multiple vulnerabilities in Mozilla Thunderbird
2020-04-09 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2020-04-04 00:00:00
Thunderbird vulnerabilities
2020-04-13 00:00:00
Thunderbird vulnerabilities
2020-04-21 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2020-04-04 00:08:09
osv
osv
firefox-esr - security update
2020-04-04 00:00:00
firefox-esr - security update
2020-04-08 00:00:00
thunderbird - security update
2020-04-14 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-04-04 00:00:00
archlinux
archlinux
[ASA-202004-6] firefox: arbitrary code execution
2020-04-04 00:00:00
[ASA-202004-12] thunderbird: multiple issues
2020-04-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.6.1-alt1
2020-04-04 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.7.0-alt1
2020-04-08 00:00:00
threatpost
threatpost
Firefox Zero-Day Flaws Exploited in the Wild Get Patched
2020-04-04 13:28:43
suse
suse
Security update for MozillaFirefox (critical)
2020-04-06 00:00:00
Security update for MozillaThunderbird (important)
2020-04-23 00:00:00
Security update for MozillaThunderbird (important)
2020-04-15 00:00:00
centos
centos
firefox security update
2020-04-08 15:31:17
thunderbird security update
2020-04-30 19:57:02
thunderbird security update
2020-04-28 00:21:12
debian
debian
[SECURITY] [DSA 4653-1] firefox-esr security update
2020-04-04 15:20:43
[SECURITY] [DSA 4656-1] thunderbird security update
2020-04-13 19:43:18
[SECURITY] [DLA 2170-1] firefox-esr security update
2020-04-08 11:36:36
amazon
amazon
Critical: thunderbird
2020-05-19 18:32:00
securelist
securelist
IT threat evolution Q2 2020. PC statistics
2020-09-03 10:30:23
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00