Summary
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, bypass Content Security Policy (CSP) restrictions, conduct
cross-site scripting (XSS) attacks, or execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 72.0.1+build1-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | firefox | 72.0.1+build1-0ubuntu0.18.04.1 |
Vulnerabilities 8
-
High 8.8
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…
KEV Nov 3, 2021 -
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @…
-
Unscored —
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presu…
-
Unscored —
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Securi…
-
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and…
-
Unscored —
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invali…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed ev…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corr…
References
-
report
https://ubuntu.com/security/CVE-2019-17016
-
report
https://ubuntu.com/security/CVE-2019-17017
-
report
https://ubuntu.com/security/CVE-2019-17020
-
report
https://ubuntu.com/security/CVE-2019-17022
-
report
https://ubuntu.com/security/CVE-2019-17023
-
report
https://ubuntu.com/security/CVE-2019-17024
-
report
https://ubuntu.com/security/CVE-2019-17025
-
report
https://ubuntu.com/security/CVE-2019-17026