Vulnerability CVE-2020-6814: Information

Description

Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-6814
Published: March 26, 2020
Modified: April 18, 2022
Error type identifier: CWE-787

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus74.0-alt1126.0.1-alt1ALT-PU-2020-1486-1247871Fixed
firefoxp1074.0-alt1118.0.2-alt0.p10.1ALT-PU-2020-1486-1247871Fixed
firefoxp980.0.1-alt0.1.p9105.0.1-alt0.c9.1ALT-PU-2020-3442-1262506Fixed
firefoxc10f174.0-alt1112.0.2-alt0.p10.1ALT-PU-2020-1486-1247871Fixed
firefoxc9f293.0-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2021-3368-1288792Fixed
firefoxp1174.0-alt1126.0.1-alt1ALT-PU-2020-1486-1247871Fixed
firefox-esrsisyphus68.6.0-alt1115.11.0-alt1ALT-PU-2020-1461-1247676Fixed
firefox-esrp1068.6.0-alt1115.11.0-alt1ALT-PU-2020-1461-1247676Fixed
firefox-esrp968.6.0-alt1102.11.0-alt0.c9.1ALT-PU-2020-1493-1247748Fixed
firefox-esrc10f168.6.0-alt1115.9.1-alt0.c10.1ALT-PU-2020-1461-1247676Fixed
firefox-esrc9f278.7.1-alt0.1.c9102.12.0-alt0.c9.1ALT-PU-2021-1368-1264611Fixed
firefox-esrp1168.6.0-alt1115.11.0-alt1ALT-PU-2020-1461-1247676Fixed
thunderbirdsisyphus68.6.0-alt1115.9.0-alt1ALT-PU-2020-1485-1247831Fixed
thunderbirdp1068.6.0-alt1115.9.0-alt1ALT-PU-2020-1485-1247831Fixed
thunderbirdp968.6.0-alt1102.11.0-alt0.c9.1ALT-PU-2020-1515-1245787Fixed
thunderbirdc10f168.6.0-alt1115.9.0-alt0.c10.1ALT-PU-2020-1485-1247831Fixed
thunderbirdc9f268.6.0-alt1102.11.0-alt0.c9.1ALT-PU-2020-1515-1245787Fixed
thunderbirdp1168.6.0-alt1115.9.0-alt1ALT-PU-2020-1485-1247831Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2020-10/
  • Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1592078%2C1604847%2C1608256%2C1612636%2C1614339
  • Issue Tracking
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-08/
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-09/
  • Vendor Advisory
USN-4328-1
  • Third Party Advisory
USN-4335-1
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
      End excliding
      68.6.0
      cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
      End excliding
      68.6.0
      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      74.0

      Configuration 2

      cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top