Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Mozilla Firefox ESR, Thunderbird — RHSA-2019:1951 Clear all filters
TI-2019-08780 CVE-2019-11719 · GHSA-mg9h-wcqm-m3mw

Out-of-bounds read in Mozilla Firefox ESR

Priority LOW 37

When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02292 Published 2019-07-23 Partial fix · 60.8, 68 CWE-125
TI-2019-08788 CVE-2019-11729 · GHSA-x7fr-mw8m-fh4w

Memory corruption in Mozilla Firefox ESR

Priority LOW 38

Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02794 Published 2019-07-23 Partial fix · 60.8, 68 CWE-119