Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2025-042 (ALASFIREFOX-2025-042)

The version of firefox installed on the remote host is prior to 140.2.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2025-042 advisory. Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo:...

CVE-2025-6703

Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2...

CVE-2025-6703

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19581 2025-06-26 12:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj5hcwruh2r...

CVE-2025-6703 transport/fc.rs: panic attempting to send MAX_DATA with value larger max varint

Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2...

CVE-2025-6703 transport/fc.rs: panic attempting to send MAX_DATA with value larger max varint

Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2...

CVE-2025-6703 transport/fc.rs: panic attempting to send MAX_DATA with value larger max varint

Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2...

CVE-2025-6703

CVE-2025-6703 is a Mozilla neqo issue described as an improper input validation that causes an unexploitable crash in the neqo QUIC implementation. Public documentation confirms affected versions: neqo 0.4.24 through 0.13.2. The connected advisories expand impact scope to multiple Mozilla product...