Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-6805HistoryMar 25, 2020 - 10:15 p.m.
CVE-2020-6805
2020-03-2522:15:12
Debian Security Bug Tracker
security-tracker.debian.org
26
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.008
Percentile
81.8%
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 74.0-1 | firefox_74.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 68.6.0esr-1 | firefox-esr_68.6.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 68.6.0esr-1 | firefox-esr_68.6.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 68.6.0esr-1 | firefox-esr_68.6.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 68.6.0esr-1 | firefox-esr_68.6.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:68.6.0-1 | thunderbird_1:68.6.0-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:68.6.0-1 | thunderbird_1:68.6.0-1_all.deb |
| Debian | 999 | all | thunderbird | < 1:68.6.0-1 | thunderbird_1:68.6.0-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:68.6.0-1 | thunderbird_1:68.6.0-1_all.deb |
Related
alpinelinux
alpinelinux
CVE-2020-6805
2020-03-25 22:15:12
prion
prion
Design/Logic Flaw
2020-03-25 22:15:00
redhatcve
redhatcve
CVE-2020-6805
2020-03-10 21:40:56
cve
cve
CVE-2020-6805
2020-03-25 22:15:12
cvelist
cvelist
CVE-2020-6805
2020-03-25 21:14:20
ubuntucve
ubuntucve
CVE-2020-6805
2020-03-11 00:00:00
nvd
nvd
CVE-2020-6805
2020-03-25 22:15:12
veracode
veracode
Denial Of Service (DoS)
2020-03-18 00:55:39
threatpost
threatpost
Firefox Bug Opens iPhone AirPods to Third-Party Snooping
2020-03-10 18:14:15
Firefox Bug Opens iPhone AirPods to Third-Party Snooping
2020-03-10 18:14:15
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-03-14 11:35:35
Updated firefox packages fix security vulnerabilities
2020-03-14 11:35:35
nessus
nessus
Debian DLA-2140-1 : firefox-esr security update
2020-03-12 00:00:00
Slackware 14.2 / current : mozilla-thunderbird (SSA:2020-073-01)
2020-03-16 00:00:00
RHEL 7 : thunderbird (RHSA-2020:0905)
2020-03-23 00:00:00
suse
suse
Security update for MozillaThunderbird (important)
2020-03-22 00:00:00
Security update for MozillaFirefox (important)
2020-03-14 00:00:00
debian
debian
[SECURITY] [DLA 2150-1] thunderbird security update
2020-03-20 10:00:10
[SECURITY] [DLA 2140-1] firefox-esr security update
2020-03-11 21:34:36
[SECURITY] [DSA 4642-1] thunderbird security update
2020-03-19 22:32:44
osv
osv
firefox-esr - security update
2020-03-11 00:00:00
thunderbird - security update
2020-03-19 00:00:00
firefox-esr - security update
2020-03-11 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2140-1)
2020-03-18 00:00:00
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2020:0340-1)
2020-03-15 00:00:00
Debian: Security Advisory (DSA-4639-1)
2020-03-18 00:00:00
oraclelinux
oraclelinux
firefox security update
2020-03-17 00:00:00
thunderbird security update
2020-03-23 00:00:00
thunderbird security update
2020-03-20 00:00:00
centos
centos
firefox security update
2020-03-25 19:17:41
firefox security update
2020-03-25 19:19:48
thunderbird security update
2020-03-25 19:18:41
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.6.0-alt1
2020-03-10 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.6.0-alt1
2020-03-14 00:00:00
redhat
redhat
(RHSA-2020:0815) Important: firefox security update
2020-03-16 08:03:05
(RHSA-2020:0914) Important: thunderbird security update
2020-03-23 07:29:42
(RHSA-2020:0918) Important: thunderbird security update
2020-03-23 07:49:11
kaspersky
kaspersky
KLA11688 Multiple vulnerabilities in Mozilla Firefox ESR
2020-03-10 00:00:00
KLA11701 Multiple vulnerabilities in Mozilla Thunderbird
2020-03-10 00:00:00
KLA11691 Multiple vulnerabilities in Mozilla Firefox
2020-02-12 00:00:00
archlinux
archlinux
[ASA-202003-11] thunderbird: multiple issues
2020-03-16 00:00:00
[ASA-202003-8] firefox: multiple issues
2020-03-11 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2020-03-10 20:37:32
[slackware-security] mozilla-thunderbird
2020-03-13 21:47:41
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 68.6 — Mozilla
2020-03-10 00:00:00
Security Vulnerabilities fixed in Firefox ESR 68.6 — Mozilla
2020-03-10 00:00:00
Security Vulnerabilities fixed in Firefox 74 — Mozilla
2020-03-10 00:00:00
amazon
amazon
Important: thunderbird
2020-04-20 20:48:00
ubuntu
ubuntu
Firefox vulnerabilities
2020-03-11 00:00:00
Thunderbird vulnerabilities
2020-04-13 00:00:00
Thunderbird vulnerabilities
2020-04-21 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-03-12 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2020-03-14 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.008
Percentile
81.8%
Related for DEBIANCVE:CVE-2020-6805