Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

Debian: DSA-4235-1 Critical: Firefox-ESR Memory Flaws & Exploits

debian
Calendar Grey June 27, 2018
Debian Logo
Numerous vulnerabilities identified in Firefox-ESR may allow for arbitrary code execution, service disruption, or data exposure.
Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary cod...
Topics%20covered

Topics Covered

security advisory denial of service debian arbitrary code execution information disclosure memory safety

Summary

Several security issues have been found in the Mozilla Firefox web
browser: Multiple memory safety errors and other implementation errors may
lead to the execution of arbitrary code, denial of service, cross-site
request forgery or information disclosure.

For the stable distribution (stretch), these problems have been fixed in
version 52.9.0esr-1~deb9u1.

We recommend that you upgrade your firefox-esr packages.

For the detailed security status of firefox-esr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/firefox-esr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: firefox-esr
CVE ID: CVE-2018-5156 CVE-2018-12359 CVE-2018-12360 CVE-2018-12362

Topics%20covered

Topics Covered

security advisory denial of service debian arbitrary code execution information disclosure memory safety

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.