Skip to content
OpenAdvisories
Medium USN-3516-1 3 CVEs

firefox vulnerabilities

Published Jan 5, 2018 · Updated May 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that speculative execution performed by modern CPUs
could leak information through a timing side-channel attack, and that
this could be exploited in web browser JavaScript engines. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit this to obtain sensitive information from other
domains, bypassing same-origin restrictions. (CVE-2017-5715,
CVE-2017-5753, CVE-2017-5754).

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS firefox 57.0.4+build1-0ubuntu0.14.04.1
Ubuntu · 16.04 LTS 16.04:LTS firefox 57.0.4+build1-0ubuntu0.16.04.1

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2017-5715
  • report
    https://ubuntu.com/security/CVE-2017-5753
  • report
    https://ubuntu.com/security/CVE-2017-5754