Skip to content
OpenAdvisories
Unscored CVE-2019-9805 EUVD-2019-19167GHSA-fqhq-pc8v-8xch

A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, leading to potential…

Published Apr 26, 2019 · Updated Aug 4, 2024 · Assigned by mozilla

Vendor: Mozilla Product: Firefox Package: firefox Package: mozjs38 Package: mozjs52 Category: Browsers Ecosystem: Ubuntu

Description

A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, leading to potential memory corruption. This vulnerability affects Firefox < 66.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 66 66

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS mozjs52 No fix yet —
Ubuntu 18.04 LTS firefox 66.0+build3-0ubuntu0.18.04.1 USN-3918-1
Ubuntu 18.04 LTS mozjs38 +1 No fix yet —
Ubuntu 16.04 LTS firefox 66.0+build3-0ubuntu0.16.04.2 USN-3918-1
Ubuntu 14.04 LTS firefox 66.0.1+build1-0ubuntu0.14.04.1 USN-3918-2

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 92.0-1.2 openSUSE-SU-2024:10600-1
openSUSE Tumbleweed firefox-esr 128.5.1-1.1 openSUSE-SU-2024:14572-1

Advisories 4

References