MGASA-2019-0376: firefox Mageia
Vulnerability summary
MGASA-2019-0376 is a vulnerability in firefox Mageia with no CVSS score yet.
Advisory lineage
Upstream 7 · Downstream 0Timeline
- 08-12-2019PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated firefox packages fix security vulnerabilities Updated firefox packages fix security vulnerabilities: Stack corruption due to incorrect number of arguments in WebRTC code. (CVE-2019-13722) Buffer overflow in plain text serializer. (CVE-2019-17005) Use-after-free in worker destruction. (CVE-2019-17008) Updater temporary files accessible to unprivileged processes. (CVE-2019-17009) Use-after-free when performing device orientation checks. (CVE-2019-17010) Use-after-free when retrieving a document in antitracking. (CVE-2019-17011) Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3. (CVE-2019-17012)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia3 products
- firefox< 68.3.0-1.mga7
- firefox-l10n< 68.3.0-1.mga7
- nspr< 4.24-1.mga7
1 vendor · 3 products