Vulnerability BDU:2020-05803: Information

Description

Уязвимость браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная c использованием памяти после освобождения, позволяющая нарушителю вызвать отказ в обслуживании

Severity: CRITICAL (9.8) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

URL: https://bdu.fstec.ru/vul/2020-05803
Published: March 12, 2017
Modified: March 12, 2017
Error type identifier: CWE-416

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus53.0.2-alt1126.0.1-alt1ALT-PU-2017-1577-1182567Fixed
firefoxp1053.0.2-alt1118.0.2-alt0.p10.1ALT-PU-2017-1577-1182567Fixed
firefoxp953.0.2-alt1105.0.1-alt0.c9.1ALT-PU-2017-1577-1182567Fixed
firefoxp853.0.2-alt0.M80P.168.0.1-alt0.M80P.1ALT-PU-2017-1579-1182593Fixed
firefoxc10f153.0.2-alt1112.0.2-alt0.p10.1ALT-PU-2017-1577-1182567Fixed
firefoxc9f253.0.2-alt1105.0.1-alt0.c9.1ALT-PU-2017-1577-1182567Fixed
firefoxc745.9.0-alt0.M70C.160.8.0-alt0.M70C.1ALT-PU-2017-1731-1184202Fixed
firefoxp1153.0.2-alt1126.0.1-alt1ALT-PU-2017-1577-1182567Fixed
firefox-esrsisyphus45.9.0-alt1115.11.0-alt1ALT-PU-2017-1505-1181971Fixed
firefox-esrp1045.9.0-alt1115.11.0-alt1ALT-PU-2017-1505-1181971Fixed
firefox-esrp945.9.0-alt1102.11.0-alt0.c9.1ALT-PU-2017-1505-1181971Fixed
firefox-esrp845.9.0-alt0.M80P.168.4.1-alt0.M80P.1ALT-PU-2017-1533-1182241Fixed
firefox-esrc10f145.9.0-alt1115.9.1-alt0.c10.1ALT-PU-2017-1505-1181971Fixed
firefox-esrc9f245.9.0-alt1102.12.0-alt0.c9.1ALT-PU-2017-1505-1181971Fixed
firefox-esrp1145.9.0-alt1115.11.0-alt1ALT-PU-2017-1505-1181971Fixed
firefox-gostp845.9.0-alt0.M80P.145.9.0-alt0.M80P.1ALT-PU-2017-1537-1182288Fixed
firefox-gostc745.9.0-alt0.M70C.145.9.0-alt0.M70C.1ALT-PU-2017-1732-1184202Fixed
thunderbirdsisyphus52.1.0-alt1115.9.0-alt1ALT-PU-2017-1553-1182391Fixed
thunderbirdp1052.1.0-alt1115.9.0-alt1ALT-PU-2017-1553-1182391Fixed
thunderbirdp952.1.0-alt1102.11.0-alt0.c9.1ALT-PU-2017-1553-1182391Fixed
thunderbirdp852.3.0-alt0.M80P.160.8.0-alt0.M80P.1ALT-PU-2017-2238-1188382Fixed
thunderbirdc10f152.1.0-alt1115.9.0-alt0.c10.1ALT-PU-2017-1553-1182391Fixed
thunderbirdc9f252.1.0-alt1102.11.0-alt0.c9.1ALT-PU-2017-1553-1182391Fixed
thunderbirdc760.8.0-alt0.M70C.160.8.0-alt0.M70C.1ALT-PU-2019-2345-1234994Fixed
thunderbirdp1152.1.0-alt1115.9.0-alt1ALT-PU-2017-1553-1182391Fixed

References to Advisories, Solutions, and Tools

Vulnerability Status
Подтверждена производителем
Presence of an exploit
Данные уточняются
Fix status
Уязвимость устранена
Software Type
Операционная система, Прикладное ПО информационных систем
Solution
Использование рекомендаций:
Для продуктов Mozilla:
https://www.mozilla.org/security/advisories/mfsa2017-10/
https://www.mozilla.org/security/advisories/mfsa2017-11/
https://www.mozilla.org/security/advisories/mfsa2017-12/	
https://www.mozilla.org/security/advisories/mfsa2017-13/	

Для продуктов Red Hat:
https://access.redhat.com/security/cve/CVE-2017-5432

Для продуктов Novell Inc.:
https://www.suse.com/security/cve/CVE-2017-5432/

Для Astra Linux:
https://wiki.astralinux.ru/pages/viewpage.action?pageId=1212483
https://wiki.astralinux.ru/astra-linux-se15-bulletin-20201201SE15

Для Debian:
https://www.debian.org/security/2017/dsa-3831

Для Альт Линукс:
https://cve.basealt.ru/

Для Ubuntu:
https://ubuntu.com/security/notices/USN-3260-1?_ga=2.91217818.1630830267.1608209597-1543702552.1605094901
https://ubuntu.com/security/notices/USN-3278-1?_ga=2.91217818.1630830267.1608209597-1543702552.1605094901
Sources
https://security-tracker.debian.org/tracker/CVE-2017-5432
https://nvd.nist.gov/vuln/detail/CVE-2017-5432
https://www.mozilla.org/security/advisories/mfsa2017-10/
https://www.mozilla.org/security/advisories/mfsa2017-11/
https://www.mozilla.org/security/advisories/mfsa2017-12/	
https://www.mozilla.org/security/advisories/mfsa2017-13/	
https://access.redhat.com/security/cve/CVE-2017-5432
https://www.suse.com/security/cve/CVE-2017-5432/
https://wiki.astralinux.ru/pages/viewpage.action?pageId=1212483
https://wiki.astralinux.ru/astra-linux-se15-bulletin-20201201SE15
https://www.debian.org/security/2017/dsa-3831
https://cve.basealt.ru/
https://ubuntu.com/security/notices/USN-3260-1?_ga=2.91217818.1630830267.1608209597-1543702552.1605094901
https://ubuntu.com/security/notices/USN-3278-1?_ga=2.91217818.1630830267.1608209597-1543702552.1605094901
Other system identifiers
CVE-2017-5432
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top