Vulnerability CVE-2019-11710: Information

Description

Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 68.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2019-11710
Published: July 23, 2019
Modified: April 18, 2022
Error type identifier: CWE-787

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus68.0-alt1126.0.1-alt1ALT-PU-2019-2301-1234573Fixed
firefoxp1068.0-alt1118.0.2-alt0.p10.1ALT-PU-2019-2301-1234573Fixed
firefoxp968.0.1-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2019-2479-1235125Fixed
firefoxp868.0.1-alt0.M80P.168.0.1-alt0.M80P.1ALT-PU-2019-2938-1236175Fixed
firefoxc10f168.0-alt1112.0.2-alt0.p10.1ALT-PU-2019-2301-1234573Fixed
firefoxc9f268.0.1-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2019-2479-1235125Fixed
firefoxp1168.0-alt1126.0.1-alt1ALT-PU-2019-2301-1234573Fixed
firefox-esrsisyphus68.0.1-alt1115.11.0-alt1ALT-PU-2019-2324-1234871Fixed
firefox-esrp1068.0.1-alt1115.11.0-alt1ALT-PU-2019-2324-1234871Fixed
firefox-esrp968.0.2-alt1102.11.0-alt0.c9.1ALT-PU-2019-2486-1235108Fixed
firefox-esrp868.1.0-alt1.M80P.168.4.1-alt0.M80P.1ALT-PU-2019-2937-1236175Fixed
firefox-esrc10f168.0.1-alt1115.9.1-alt0.c10.1ALT-PU-2019-2324-1234871Fixed
firefox-esrc9f268.0.2-alt1102.12.0-alt0.c9.1ALT-PU-2019-2486-1235108Fixed
firefox-esrp1168.0.1-alt1115.11.0-alt1ALT-PU-2019-2324-1234871Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2019-21/
  • Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1549768%2C1548611%2C1533842%2C1537692%2C1540590%2C1551907%2C1510345%2C1535482%2C1535848%2C1547472%2C1547760%2C1507696%2C1544180
  • Issue Tracking
  • Vendor Advisory
GLSA-201908-12
  • Third Party Advisory
openSUSE-SU-2019:2249
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2019:2248
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2019:2251
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2019:2260
  • Mailing List
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      68.0

      Configuration 2

      cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
      cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top