Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2019-11713HistoryJul 23, 2019 - 2:15 p.m.
CVE-2019-11713
2019-07-2314:15:15
Debian Security Bug Tracker
security-tracker.debian.org
14
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.015
Percentile
87.1%
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 68.0-1 | firefox_68.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 60.8.0esr-1 | firefox-esr_60.8.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 60.8.0esr-1 | firefox-esr_60.8.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 60.8.0esr-1 | firefox-esr_60.8.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 60.8.0esr-1 | firefox-esr_60.8.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:60.8.0-1 | thunderbird_1:60.8.0-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:60.8.0-1 | thunderbird_1:60.8.0-1_all.deb |
| Debian | 999 | all | thunderbird | < 1:60.8.0-1 | thunderbird_1:60.8.0-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:60.8.0-1 | thunderbird_1:60.8.0-1_all.deb |
Related
cve
cve
CVE-2019-11713
2019-07-23 14:15:15
alpinelinux
alpinelinux
CVE-2019-11713
2019-07-23 14:15:15
nvd
nvd
CVE-2019-11713
2019-07-23 14:15:15
prion
prion
Design/Logic Flaw
2019-07-23 14:15:00
veracode
veracode
Denial Of Service (DoS)
2019-07-15 00:07:43
redhatcve
redhatcve
CVE-2019-11713
2022-01-13 06:47:33
cvelist
cvelist
CVE-2019-11713
2019-07-23 13:18:51
ubuntucve
ubuntucve
CVE-2019-11713
2019-07-11 00:00:00
nessus
nessus
Amazon Linux 2 : thunderbird (ALAS-2019-1267)
2019-08-12 00:00:00
RHEL 7 : thunderbird (RHSA-2019:1775)
2019-07-16 00:00:00
RHEL 8 : firefox (RHSA-2019:1764)
2019-07-15 00:00:00
amazon
amazon
Critical: thunderbird
2019-08-08 15:57:00
debian
debian
[SECURITY] [DLA 1870-1] thunderbird security update
2019-08-02 09:45:59
[SECURITY] [DLA 1869-1] firefox-esr security update
2019-08-02 09:44:37
[SECURITY] [DSA 4479-1] firefox-esr security update
2019-07-11 20:56:14
redhat
redhat
(RHSA-2019:1765) Critical: firefox security update
2019-07-11 16:58:23
(RHSA-2019:1775) Important: thunderbird security update
2019-07-15 12:08:34
(RHSA-2019:1777) Important: thunderbird security update
2019-07-15 13:03:54
oraclelinux
oraclelinux
thunderbird security update
2019-07-24 00:00:00
firefox security update
2019-07-30 00:00:00
firefox security update
2019-07-11 00:00:00
centos
centos
firefox security update
2019-07-12 16:20:59
thunderbird security update
2019-07-17 17:50:04
firefox security update
2019-07-12 16:21:53
openvas
openvas
CentOS Update for firefox CESA-2019:1763 centos7
2019-07-13 00:00:00
CentOS Update for firefox CESA-2019:1765 centos6
2019-07-13 00:00:00
Debian: Security Advisory (DLA-1870-1)
2019-08-03 00:00:00
osv
osv
thunderbird - security update
2019-07-14 00:00:00
thunderbird - security update
2019-08-02 00:00:00
firefox-esr - security update
2019-08-02 00:00:00
suse
suse
Security update for MozillaThunderbird (moderate)
2019-08-23 00:00:00
Security update for MozillaThunderbird (important)
2019-07-30 00:00:00
Security update for MozillaFirefox (important)
2019-07-21 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2019-07-21 21:17:27
Updated firefox packages fix security vulnerability
2019-07-21 21:17:27
Updated thunderbird packages fix security vulnerabilities
2019-09-12 22:09:52
ubuntu
ubuntu
Thunderbird vulnerabilities
2019-07-17 00:00:00
Firefox vulnerabilities
2019-07-12 00:00:00
Firefox regressions
2019-07-25 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2019-07-11 00:13:28
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.0.1-alt1
2019-07-19 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.0-alt1
2019-08-29 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 60.8.0-alt1
2019-07-10 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 60.8 — Mozilla
2019-07-09 00:00:00
Security vulnerabilities fixed in Firefox ESR 60.8 — Mozilla
2019-07-09 00:00:00
Security vulnerabilities fixed in Thunderbird 68 — Mozilla
2019-08-27 00:00:00
kaspersky
kaspersky
KLA11524 Multiple vulnerabilities in Mozilla Thunderbird
2019-07-09 00:00:00
KLA11516 Multiple vulnerabilities in Mozilla Firefox ESR
2019-07-09 00:00:00
KLA11515 Multiple vulnerabilities in Mozilla Firefox
2019-07-09 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2019-08-16 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2019-08-15 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2019-07-09 00:00:00
ibm
ibm
archlinux
archlinux
[ASA-201907-4] firefox: multiple issues
2019-07-17 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.015
Percentile
87.1%
Related for DEBIANCVE:CVE-2019-11713