USN-4317-1 — firefox vulnerabilities

Summary

Two use-after-free bugs were discovered in Firefox. If a user were tricked
in to opening a specially crafted website, an attacker could exploit these
to cause a denial of service or execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	firefox	74.0.1+build1-0ubuntu0.16.04.1
Ubuntu · 18.04 LTS 18.04:LTS	firefox	74.0.1+build1-0ubuntu0.18.04.1

Vulnerabilities 2

High 8.1

CVE-2020-6819 Exploited

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
KEV Nov 3, 2021
High 8.1

CVE-2020-6820 Exploited

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
KEV Nov 3, 2021

References

report
https://ubuntu.com/security/CVE-2020-6819
report
https://ubuntu.com/security/CVE-2020-6820

firefox vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 2

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

References