CVE-2019-9795: mozilla firefox Reachable Assertion
CVSS: 9.8v3.0CriticalModified
AliasesUBUNTU-CVE-2019-9795DEBIAN-CVE-2019-9795
Published 26-04-2019Last modified 04-08-2024
Vulnerability summary
CVE-2019-9795 is a critical (CVSS 9.8) Reachable Assertion vulnerability in mozilla firefox. EPSS estimates a 1.70% chance of exploitation in the next 30 days, higher than 76.8% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.0 (NVD)EPSS score
1.70%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 23 · Related 11DLA-1722-1DLA-1743-1DSA-4411-1DSA-4420-1MGASA-2019-0116MGASA-2019-0129OPENSUSE-SU-2019:1077-1OPENSUSE-SU-2019:1126-1OPENSUSE-SU-2019:1162-1OPENSUSE-SU-2024:10600-1OPENSUSE-SU-2024:14572-1RHSA-2019:0622RHSA-2019:0623RHSA-2019:0680RHSA-2019:0681RHSA-2019:0966RHSA-2019:1144SUSE-SU-2019:0852-1SUSE-SU-2019:0853-1SUSE-SU-2019:0871-1USN-3918-1USN-3918-2USN-3927-1
Timeline
- 26-04-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
CVSS metrics
4 scores · 3 sources · 2 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
1.70%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
0.00 pp
From 1.70% on 19-09-2026
19-09-202619-10-2026
EPSS score1.70%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-617Reachable AssertionThe product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
- CWE-843Access of Resource Using Incompatible Type ('Type Confusion')The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Affected systems
Ubuntu4 products
- firefox< 66.0.1+build1-0ubuntu0.14.04.1 | < 66.0+build3-0ubuntu0.16.04.2 | < 66.0+build3-0ubuntu0.18.04.1
- mozjs38All versions (No fix recorded)
- mozjs52All versions (No fix recorded)
- thunderbird< 1:60.6.1+build2-0ubuntu0.14.04.1 | < 1:60.6.1+build2-0ubuntu0.16.04.1 | < 1:60.6.1+build2-0ubuntu0.18.04.1
Mozilla3 products
- firefox≥ unspecified, < 66 | < 66.0
- firefox_esr≥ unspecified, < 60.6 | < 60.6
- thunderbird≥ unspecified, < 60.6 | < 60.6
Debian2 products
- firefox-esr< 60.6.0esr-1
- thunderbird< 1:60.6.1-1
3 vendors · 9 products
References
15 links- bugzilla.mozilla.org/show_bug.cgi?id=1514682X Refsource MISCIssue TrackingPermissions RequiredVendor Advisory
