Read the docs
Red Hat Security Advisory

RHSA-2020:2048

thunderbird security update

Released 2020-05-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 5 records

TI-2020-05540 CVE-2020-6831 · GHSA-5x26-44w7-97vc

Out-of-bounds write in Mozilla Firefox ESR

Priority MEDIUM 51

A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05803 Published 2020-05-26 Partial fix · 68.8, 76 +1 CWE-787
TI-2020-09913 CVE-2020-12395 · GHSA-v3wf-5473-qgjv

Out-of-bounds write in Mozilla Firefox ESR

Priority MEDIUM 47

Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02597 Published 2020-05-26 Partial fix · 68.8, 76 +1 CWE-787
TI-2020-09905 CVE-2020-12387 · GHSA-8m69-jh8v-xjx3

Race condition in Mozilla Firefox ESR

Priority LOW 38

A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01438 Published 2020-05-26 Partial fix · 68.8, 76 +1 CWE-362
TI-2020-09910 CVE-2020-12392 · GHSA-f75r-qhf4-x3wr

Path traversal in Mozilla Firefox ESR

Priority LOW 25

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00347 Published 2020-05-26 Partial fix · 68.8, 76 +1 CWE-22
TI-2020-09915 CVE-2020-12397 · GHSA-mg46-fgw7-xxfg

Origin validation error in Mozilla Thunderbird

Priority LOW 21

By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00612 Published 2020-05-22 Partial fix · 68.8.0 CWE-346