SUSE-SU-2020:14290-1: MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise

CVSS: UnknownPublished
Published 24-02-2020Last modified 02-05-2025
Open JSON

Vulnerability summary

SUSE-SU-2020:14290-1 is a vulnerability in MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5
CVE-2020-6796CVE-2020-6797CVE-2020-6798CVE-2020-6799CVE-2020-6800

Timeline

  1. 24-02-2020
    PublishedVulnerability first disclosed.
  2. 02-05-2025
    Last modifiedVulnerability information updated.

Description

Security update for MozillaFirefox This update for MozillaFirefox fixes the following issues: Firefox was updated to version 68.5.0 ESR (bsc#1163368). Security issues fixed: - CVE-2020-6796: Fixed a missing bounds check on shared memory in the parent process (bsc#1163368). - CVE-2020-6798: Fixed a JavaScript code injection issue caused by the incorrect parsing of template tags (bsc#1163368). - CVE-2020-6799: Fixed a local arbitrary code execution issue when handling PDF links from other applications (bsc#1163368). - CVE-2020-6800: Fixed several memory safety bugs (bsc#1163368). Non-security issues fixed: - Fixed various issues opening files with spaces in their path (bmo#1601905, bmo#1602726).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse1 product
  • MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP4-LTSS< 68.5.0-78.61.2

1 vendor · 1 product

References

8 links