Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-35111HistoryJan 07, 2021 - 2:15 p.m.
CVE-2020-35111
2021-01-0714:15:00
Debian Security Bug Tracker
security-tracker.debian.org
12
0.001 Low
EPSS
Percentile
41.8%
When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 84.0-1 | firefox_84.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 78.6.0esr-1 | firefox-esr_78.6.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 78.6.0esr-1 | firefox-esr_78.6.0esr-1_all.deb |
| Debian | 10 | all | firefox-esr | < 78.6.0esr-1~deb10u1 | firefox-esr_78.6.0esr-1~deb10u1_all.deb |
| Debian | 999 | all | firefox-esr | < 78.6.0esr-1 | firefox-esr_78.6.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 78.6.0esr-1 | firefox-esr_78.6.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:78.6.0-1 | thunderbird_1:78.6.0-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:78.6.0-1 | thunderbird_1:78.6.0-1_all.deb |
| Debian | 10 | all | thunderbird | < 1:78.6.0-1~deb10u1 | thunderbird_1:78.6.0-1~deb10u1_all.deb |
| Debian | 999 | all | thunderbird | < 1:78.6.0-1 | thunderbird_1:78.6.0-1_all.deb |
Related
alpinelinux
alpinelinux
CVE-2020-35111
2021-01-07 14:15:00
redhatcve
redhatcve
CVE-2020-35111
2020-12-15 18:32:37
cve
cve
CVE-2020-35111
2021-01-07 14:15:00
cvelist
cvelist
CVE-2020-35111
2021-01-07 13:50:26
prion
prion
Design/Logic Flaw
2021-01-07 14:15:00
ubuntucve
ubuntucve
CVE-2020-35111
2020-12-15 00:00:00
veracode
veracode
Information Disclosure
2020-12-16 08:54:27
oraclelinux
oraclelinux
firefox security update
2020-12-17 00:00:00
firefox security update
2020-12-17 00:00:00
thunderbird security update
2020-12-18 00:00:00
nessus
nessus
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2020:5618)
2020-12-17 00:00:00
RHEL 8 : firefox (RHSA-2020:5564)
2020-12-18 00:00:00
Oracle Linux 8 : ELSA-2020-5624-1: / thunderbird (ELSA-2020-56241)
2020-12-18 00:00:00
debian
debian
[SECURITY] [DSA 4815-1] thunderbird security update
2020-12-17 09:31:04
[SECURITY] [DSA 4815-1] thunderbird security update
2020-12-17 09:30:44
[SECURITY] [DLA 2496-1] firefox-esr security update
2020-12-16 22:00:50
openvas
openvas
Debian: Security Advisory (DSA-4815-1)
2020-12-18 00:00:00
Debian: Security Advisory (DSA-4813-1)
2020-12-17 00:00:00
Mageia: Security Advisory (MGASA-2020-0461)
2022-01-28 00:00:00
centos
centos
thunderbird security update
2020-12-21 20:46:06
redhat
redhat
(RHSA-2020:5561) Important: firefox security update
2020-12-16 07:29:44
(RHSA-2020:5562) Important: firefox security update
2020-12-16 07:29:53
(RHSA-2020:5622) Important: thunderbird security update
2020-12-17 15:53:57
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-12-17 16:10:41
Updated firefox packages fix security vulnerabilities
2020-12-17 16:10:41
osv
osv
thunderbird - security update
2020-12-17 00:00:00
firefox-esr - security update
2020-12-16 00:00:00
firefox-esr - security update
2020-12-16 00:00:00
gentoo
gentoo
Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities
2020-12-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 78.6.0-alt1
2020-12-14 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 78.6.0-alt1
2020-12-15 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 78.6 — Mozilla
2020-12-15 00:00:00
Security Vulnerabilities fixed in Firefox ESR 78.6 — Mozilla
2020-12-15 00:00:00
Security Vulnerabilities fixed in Firefox 84 — Mozilla
2020-12-15 00:00:00
suse
suse
Security update for MozillaFirefox (critical)
2020-12-22 00:00:00
Security update for MozillaThunderbird (critical)
2020-12-22 00:00:00
Security update for MozillaFirefox (critical)
2020-12-25 00:00:00
archlinux
archlinux
[ASA-202012-23] thunderbird: multiple issues
2020-12-16 00:00:00
[ASA-202012-25] firefox: multiple issues
2020-12-16 00:00:00
kaspersky
kaspersky
KLA12030 Multiple vulnerabilities in Mozilla Firefox ESR
2020-12-15 00:00:00
KLA12031 Multiple vulnerabilities in Mozilla Thunderbird
2020-12-15 00:00:00
KLA12029 Multiple vulnerabilities in Mozilla Firefox
2020-12-15 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2021-01-20 00:00:00
Firefox vulnerabilities
2020-12-15 00:00:00
amazon
amazon
Important: thunderbird
2021-01-05 23:35:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1986
2021-07-02 18:16:55
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38