Vulnerability CVE-2020-15683: Information

Description

Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.4, Firefox < 82, and Thunderbird < 78.4.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-15683
Published: Oct. 23, 2020
Modified: April 28, 2022
Error type identifier: CWE-787, CWE-416

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus82.0-alt1127.0-alt1ALT-PU-2020-3120-1260224Fixed
firefoxp1082.0-alt1118.0.2-alt0.p10.1ALT-PU-2020-3120-1260224Fixed
firefoxp982.0.3-alt0.1.p9105.0.1-alt0.c9.1ALT-PU-2021-1152-1264322Fixed
firefoxc10f182.0-alt1112.0.2-alt0.p10.1ALT-PU-2020-3120-1260224Fixed
firefoxc9f293.0-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2021-3368-1288792Fixed
firefoxp1182.0-alt1126.0.1-alt1ALT-PU-2020-3120-1260224Fixed
firefox-esrsisyphus78.4.0-alt1115.11.0-alt1ALT-PU-2020-3115-1260143Fixed
firefox-esrp1091.1.0-alt1115.11.0-alt1ALT-PU-2021-2881-1284980Fixed
firefox-esrp978.4.0-alt0.1.p9102.11.0-alt0.c9.1ALT-PU-2020-3134-1260258Fixed
firefox-esrc10f191.1.0-alt1115.9.1-alt0.c10.1ALT-PU-2021-2881-1284980Fixed
firefox-esrc9f291.3.0-alt1.c9.1102.12.0-alt0.c9.1ALT-PU-2021-3369-1288792Fixed
firefox-esrp1178.4.0-alt1115.11.0-alt1ALT-PU-2020-3115-1260143Fixed
thunderbirdsisyphus78.4.0-alt1115.9.0-alt1ALT-PU-2020-3118-1260202Fixed
thunderbirdp1078.4.0-alt1115.9.0-alt1ALT-PU-2020-3118-1260202Fixed
thunderbirdp978.4.0-alt1102.11.0-alt0.c9.1ALT-PU-2020-3143-1260277Fixed
thunderbirdc10f178.4.0-alt1115.9.0-alt0.c10.1ALT-PU-2020-3118-1260202Fixed
thunderbirdc9f278.7.0-alt0.1.c9102.11.0-alt0.c9.1ALT-PU-2021-1369-1264611Fixed
thunderbirdp1178.4.0-alt1115.9.0-alt1ALT-PU-2020-3118-1260202Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2020-45/
  • Release Notes
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-46/
  • Release Notes
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-47/
  • Release Notes
  • Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1576843%2C1656987%2C1660954%2C1662760%2C1663439%2C1666140
  • Broken Link
  • Issue Tracking
  • Vendor Advisory
DSA-4780
  • Third Party Advisory
openSUSE-SU-2020:1732
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2020:1748
  • Mailing List
  • Third Party Advisory
[debian-lts-announce] 20201027 [SECURITY] [DLA 2416-1] thunderbird security update
  • Mailing List
  • Third Party Advisory
GLSA-202010-08
  • Third Party Advisory
openSUSE-SU-2020:1785
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2020:1780
  • Mailing List
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
      End excliding
      78.4
      cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
      End excliding
      78.4
      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      82.0

      Configuration 2

      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
      cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

      Configuration 3

      cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
      cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top