Lucene search
UbuntuUSN-2557-1HistoryApr 07, 2015 - 12:00 a.m.
Firefox vulnerability
2015-04-0700:00:00
ubuntu.com
29
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
9.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
51.0%
Releases
- Ubuntu 14.10
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- firefox - Mozilla Open Source web browser
Details
Muneaki Nishimura discovered a flaw in Mozilla’s HTTP Alternative Services
implementation which meant SSL certificate verification could be bypassed
in some circumstances. A remote attacker could potentially exploit this to
conduct a machine-in-the-middle attack. (CVE-2015-0799)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.10 | noarch | firefox | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-dbg | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-dev | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-globalmenu | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-locale-af | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-locale-an | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-locale-ar | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-locale-as | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-locale-ast | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | firefox-locale-az | < 37.0.1+build1-0ubuntu0.14.10.1 | UNKNOWN |
References
Related
archlinux
archlinux
firefox: certificate verification bypass
2015-04-04 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Firefox vulnerability (USN-2557-1)
2015-04-08 00:00:00
Firefox < 37.0.1 HTTP/2 Alt-Svc Header Certificate Verification Bypass
2015-04-06 00:00:00
openvas
openvas
Mozilla Firefox SSL Certificate Verification Bypass Vulnerability (Apr 2015) - Windows
2015-04-06 00:00:00
Mozilla Firefox SSL Certificate Verification Bypass Vulnerability (Apr 2015) - Mac OS X
2015-04-06 00:00:00
Mozilla Firefox Security Advisory (MFSA2015-44) - Linux
2021-11-11 00:00:00
cvelist
cvelist
CVE-2015-0799
2015-04-08 10:00:00
cve
cve
CVE-2015-0799
2015-04-08 10:59:01
ubuntucve
ubuntucve
CVE-2015-0799
2015-04-06 00:00:00
nvd
nvd
CVE-2015-0799
2015-04-08 10:59:01
mozilla
mozilla
Certificate verification bypass through the HTTP/2 Alt-Svc header — Mozilla
2015-04-03 00:00:00
prion
prion
Design/Logic Flaw
2015-04-08 10:59:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-04-03 00:00:00
kaspersky
kaspersky
KLA10531 Security bypass vulnerabilities in Mozilla Firefox
2015-04-06 00:00:00
suse
suse
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-04-08 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
9.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
51.0%
Related for USN-2557-1