Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Mozilla Firefox — RHSA-2019:1951 Clear all filters
TI-2019-08780 CVE-2019-11719 · GHSA-mg9h-wcqm-m3mw

Out-of-bounds read in Mozilla Firefox ESR

Priority LOW 37

When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02292 Published 2019-07-23 Partial fix · 60.8, 68 CWE-125
TI-2019-08786 CVE-2019-11727 · GHSA-pwq5-w788-7w28

Improper certificate validation in Mozilla Firefox

Priority LOW 28

A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01812 Published 2019-07-23 Partial fix · 68 CWE-295
TI-2019-08788 CVE-2019-11729 · GHSA-x7fr-mw8m-fh4w

Memory corruption in Mozilla Firefox ESR

Priority LOW 38

Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02794 Published 2019-07-23 Partial fix · 60.8, 68 CWE-119