Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Ubuntu 20.04 LTS Advisory USN-4443-1: Firefox Denial of Service Threat

ubuntu
Calendar Grey July 29, 2020
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-4444-1 addresses severe vulnerabilities in Chromium, allowing for potential system instability or unauthorized access.
Firefox could be made to crash or run programs as your login if it opened a malicious website.

Summary

Firefox could be made to crash or run programs as your login if it

opened a malicious website.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were

tricked in to opening a specially crafted website, an attacker could

potentially exploit these to cause a denial of service, obtain sensitive

information, bypass iframe sandbox restrictions, confuse the user, or

execute arbitrary code. (CVE-2020-6463, CVE-2020-6514, CVE-2020-15652,

CVE-2020-15653, CVE-2020-15654, CVE-2020-15656, CVE-2020-15658,

CVE-2020-15659)

It was discovered that redirected HTTP requests which are observed or

modified through a web extension could bypass existing CORS checks. If a

user were tricked in to installing a specially crafted extension, an

attacker could potentially exploit this to obtain sensitive information

across origins. (CVE-2020-15655)

Topics%20covered

Topics Covered

security advisory denial of service firefox ubuntu malicious website

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  firefox                         79.0+build1-0ubuntu0.20.04.1

Ubuntu 18.04 LTS:
  firefox                         79.0+build1-0ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  firefox                         79.0+build1-0ubuntu0.16.04.2

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4443-1

CVE-2020-15652, CVE-2020-15653, CVE-2020-15654, CVE-2020-15655,

CVE-2020-15656, CVE-2020-15658, CVE-2020-15659, CVE-2020-6463,

CVE-2020-6514

Severity
critical
Lowest
Low
Medium
High
Critical

July 29, 2020

Topics%20covered

Topics Covered

security advisory denial of service firefox ubuntu malicious website

Package Information

https://launchpad.net/ubuntu/+source/firefox/79.0+build1-0ubuntu0.20.04.1
https://launchpad.net/ubuntu/+source/firefox/79.0+build1-0ubuntu0.18.04.1
https://launchpad.net/ubuntu/+source/firefox/79.0+build1-0ubuntu0.16.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here