Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-15678HistoryOct 01, 2020 - 7:15 p.m.
CVE-2020-15678
2020-10-0119:15:00
Debian Security Bug Tracker
security-tracker.debian.org
11
0.003 Low
EPSS
Percentile
70.2%
When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 81.0-1 | firefox_81.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 78.3.0esr-1 | firefox-esr_78.3.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 78.3.0esr-1 | firefox-esr_78.3.0esr-1_all.deb |
| Debian | 10 | all | firefox-esr | < 78.3.0esr-1~deb10u1 | firefox-esr_78.3.0esr-1~deb10u1_all.deb |
| Debian | 999 | all | firefox-esr | < 78.3.0esr-1 | firefox-esr_78.3.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 78.3.0esr-1 | firefox-esr_78.3.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:78.3.1-1 | thunderbird_1:78.3.1-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:78.3.1-1 | thunderbird_1:78.3.1-1_all.deb |
| Debian | 10 | all | thunderbird | < 1:78.3.1-2~deb10u2 | thunderbird_1:78.3.1-2~deb10u2_all.deb |
| Debian | 999 | all | thunderbird | < 1:78.3.1-1 | thunderbird_1:78.3.1-1_all.deb |
Related
cve
cve
CVE-2020-15678
2020-10-01 19:15:00
prion
prion
Design/Logic Flaw
2020-10-01 19:15:00
alpinelinux
alpinelinux
CVE-2020-15678
2020-10-01 19:15:00
ubuntucve
ubuntucve
CVE-2020-15678
2020-09-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-09-24 10:29:28
cvelist
cvelist
CVE-2020-15678
2020-10-01 18:29:27
redhatcve
redhatcve
CVE-2020-15678
2020-09-22 20:48:11
nessus
nessus
Debian DLA-2408-1 : thunderbird security update
2020-10-19 00:00:00
Debian DSA-4770-1 : thunderbird - security update
2020-10-07 00:00:00
Mozilla Firefox ESR < 78.3
2020-09-22 00:00:00
osv
osv
firefox-esr - security update
2020-09-28 00:00:00
thunderbird - security update
2020-10-17 00:00:00
thunderbird - security update
2020-10-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 78.3.0-alt1
2020-09-25 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 78.3.0-alt1
2020-09-23 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2408-1)
2020-10-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2747-1)
2021-06-09 00:00:00
redhat
redhat
(RHSA-2020:3833) Important: firefox security update
2020-09-24 09:41:12
(RHSA-2020:4158) Important: thunderbird security update
2020-10-01 12:56:42
(RHSA-2020:3834) Important: firefox security update
2020-09-24 09:41:24
oraclelinux
oraclelinux
firefox security update
2020-11-14 00:00:00
thunderbird security update
2020-10-04 00:00:00
firefox security update
2020-09-24 00:00:00
kaspersky
kaspersky
KLA11966 Multiple vulnerabilities in Mozilla Thunderbird
2020-09-22 00:00:00
KLA11964 Multiple vulnerabilities in Mozilla Firefox ESR
2020-09-22 00:00:00
KLA11963 Multiple vulnerabilities in Mozilla Firefox
2020-09-22 00:00:00
debian
debian
[SECURITY] [DSA 4768-1] firefox-esr security update
2020-09-28 18:14:00
[SECURITY] [DLA 2387-1] firefox-esr security update
2020-09-28 21:34:41
[SECURITY] [DLA 2408-1] thunderbird security update
2020-10-16 22:50:04
ibm
ibm
suse
suse
Security update for MozillaFirefox (important)
2020-09-29 00:00:00
Security update for MozillaFirefox (important)
2020-09-28 00:00:00
Security update for MozillaThunderbird and mozilla-nspr (important)
2020-10-31 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 78.3 — Mozilla
2020-09-22 00:00:00
Security Vulnerabilities fixed in Firefox ESR 78.3 — Mozilla
2020-09-22 00:00:00
Security Vulnerabilities fixed in Firefox 81 — Mozilla
2020-09-22 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerabilities
2020-09-30 13:01:40
Updated Thunderbird packages fix security vulnerabilities
2020-09-30 13:01:40
gentoo
gentoo
Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities
2020-10-17 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2020-09-28 00:00:00
archlinux
archlinux
[ASA-202009-10] firefox: multiple issues
2020-09-23 00:00:00
threatpost
threatpost
Firefox 81 Release Kills High-Severity Code-Execution Bugs
2020-09-22 15:14:43
amazon
amazon
Critical: thunderbird
2020-12-08 21:30:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38