CVE-2014-1532: canonical ubuntu_linux Use After Free

CVSS: 9.8v3.1CriticalModified

AliasesUBUNTU-CVE-2014-1532

Published 30-04-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-1532 is a critical (CVSS 9.8) Use After Free vulnerability in canonical ubuntu_linux. EPSS estimates a 4.65% chance of exploitation in the next 30 days, higher than 91.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (NVD)

EPSS score

4.65%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 11 · Related 5

DSA-2918-1 DSA-2924-1 MGASA-2014-0201 MGASA-2014-0259 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1+5 more

Timeline

30-04-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.19.8v2.07.5

EPSS trend

Probability

4.65%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.65% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.65%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Redhat7 products

Show all 7

Mozilla3 products

firefox< 29.0 | ≥ 24.0, < 24.5
seamonkey< 2.26
thunderbird< 24.5

Ubuntu2 products

firefox< 29.0+build1-0ubuntu0.14.04.2
thunderbird< 1:24.5.0+build1-0ubuntu0.14.04.1

Canonical1 product

ubuntu_linuxEOL12.04 | 12.10 | 13.10 | 14.04

Debian1 product

debian_linuxEOL7.0 | 8.0

Fedoraproject1 product

fedoraEOL19 | 20

Opensuse1 product

opensuseEOL11.4 | 12.3 | 13.1

Suse1 product

suse_linux_enterprise_server10:sp4 | 11:sp1

8 vendors · 17 products

References

27 links

rhn.redhat.com/errata/RHSA-2014-0448.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mozilla.org/security/announce/2014/mfsa2014-46.htmlX Refsource CONFIRMVendor AdvisoryREPORT
lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
lists.opensuse.org/opensuse-updates/2014-05/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-updates/2014-05/msg00010.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-updates/2014-05/msg00033.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
security.gentoo.org/glsa/201504-01Vendor AdvisoryX Refsource GENTOOThird Party Advisory
www.securitytracker.com/id/1030165VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/59866Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 27 references

www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-updates/2014-05/msg00040.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2189-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
rhn.redhat.com/errata/RHSA-2014-0449.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.debian.org/security/2014/dsa-2918Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.debian.org/security/2014/dsa-2924Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.ubuntu.com/usn/USN-2185-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securityfocus.com/bid/67130VDB EntryX Refsource BIDThird Party Advisory
www.securitytracker.com/id/1030164VDB EntryX Refsource SECTRACKThird Party Advisory
www.securitytracker.com/id/1030163VDB EntryX Refsource SECTRACKThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=966006X Refsource CONFIRMExploitIssue TrackingThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
ubuntu.com/security/CVE-2014-1532REPORT
ubuntu.com/security/notices/USN-2185-1Advisory
ubuntu.com/security/notices/USN-2189-1Advisory
www.cve.org/CVERecord?id=CVE-2014-1532REPORT

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities