CVE-2019-11745: canonical ubuntu_linux Out-of-bounds Write
CVSS: 8.8v3.1HighModified
AliasesALPINE-CVE-2019-11745MGASA-2019-0374RHSA-2019:4114RHSA-2019:4152RHSA-2020:0243RHSA-2020:0466UBUNTU-CVE-2019-11745USN-4203-1USN-4203-2DEBIAN-CVE-2019-11745DLA-2008-1
Published 08-01-2020Last modified 04-08-2024
Vulnerability summary
CVE-2019-11745 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in canonical ubuntu_linux. EPSS estimates a 2.99% chance of exploitation in the next 30 days, higher than 87.1% of scored vulnerabilities.
CVSS score
8.8/10
010
High · v3.1 (NVD)EPSS score
2.99%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 21 · Related 15DLA-2388-1DSA-4579-1OPENSUSE-SU-2020:0002-1OPENSUSE-SU-2020:0003-1OPENSUSE-SU-2020:0008-1OPENSUSE-SU-2024:11058-1RHSA-2019:4190RHSA-2020:1267RHSA-2020:1345RHSA-2020:1461SUSE-SU-2019:14260-1SUSE-SU-2019:3337-1SUSE-SU-2019:3339-1SUSE-SU-2019:3347-1SUSE-SU-2019:3395-1SUSE-SU-2020:0088-1SUSE-SU-2020:14418-1USN-4216-1USN-4216-2USN-4241-1USN-4335-1
Timeline
- 08-01-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
CVSS metrics
6 scores · 5 sources · 3 versionsHigh 8.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · AlpineEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
High 8.1Preferred score · OSV · Red hat (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
Medium 6.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
2.99%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.99% on 18-09-2026
18-09-202618-10-2026
EPSS score2.99%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat18 products
- enterprise_linux_server_aus6.6
- nss< 0:3.44.0-9.el8_1 | < 0:3.44.0-8.el8_0
- nss-debuginfo< 0:3.44.0-9.el8_1 | < 0:3.44.0-8.el8_0
- nss-debugsource< 0:3.44.0-9.el8_1 | < 0:3.44.0-8.el8_0
- nss-devel< 0:3.44.0-9.el8_1 | < 0:3.44.0-8.el8_0
Siemens8 products
- ruggedcom_rox_mx5000_firmware< 2.14.0
- ruggedcom_rox_rx1400_firmware< 2.14.0
- ruggedcom_rox_rx1500_firmware< 2.14.0
- ruggedcom_rox_rx1501_firmware< 2.14.0
- ruggedcom_rox_rx1510_firmware< 2.14.0
Mozilla3 products
- firefox< 71 | < 71.0
- firefox_esr< 68.3
- thunderbird< 68.3 | < 68.3.0
Ubuntu3 products
- firefox< 71.0+build5-0ubuntu0.16.04.1 | < 71.0+build5-0ubuntu0.18.04.1
- nss< 2:3.28.4-0ubuntu0.16.04.8 | < 2:3.35-2ubuntu2.5 | < 2:3.28.4-0ubuntu0.14.04.5+esm2
- thunderbird< 1:68.7.0+build1-0ubuntu0.16.04.2 | < 1:68.4.1+build1-0ubuntu0.18.04.1
Debian2 products
- nss< 2:3.47.1-1 | < 2:3.26-1+debu8u7
- debian_linuxEOL9.0
Mageia2 products
- nss< 3.47.1-1.mga7
- rootcerts< 20191126.00-1.mga7
Alpine1 product
- nss< 3.44.3-r0 | < 3.47.1-r0
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 19.10
Opensuse1 product
- leapEOL15.1
9 vendors · 39 products
References
43 links- lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.htmlVendor AdvisoryX Refsource SUSEIssue TrackingMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- access.redhat.com/errata/RHSA-2020:0243Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2020:0466Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
Show all 43 references
lists.debian.org/debian-lts-announce/2020/09/msg00029.htmlMailing ListX Refsource MLISTThird Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-21-040-04X Refsource MISCThird Party AdvisoryUS Government Resource