kritik
CVE-2016-1930
Mozilla: Miscellaneous memory safety hazards (rv:38.6) (MFSA 2016-01)
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat. Daha düşük diyenler: Oracle (yüksek), Ubuntu (orta).
Açıklama
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 7 | icedove, iceweasel | 38.6.0-1~deb7u1 ve 1 tane daha |
| debian 8 | icedove, iceweasel | 38.6.0-1~deb8u1 ve 1 tane daha |
| Oracle Linux 5 | firefox, thunderbird | 38.6.0-1.0.1.el5_11 |
| Oracle Linux 6 | firefox, thunderbird | 38.6.0-1.0.1.el6_7 |
| Oracle Linux 7 | firefox, thunderbird | 38.6.0-1.0.1.el7_2 |
| ubuntu 12.04 | firefox, thunderbird | 44.0+build3-0ubuntu0.12.04.1 ve 1 tane daha |
| ubuntu 14.04 | firefox, thunderbird | 44.0+build3-0ubuntu0.14.04.1 ve 1 tane daha |
| ubuntu 15.04 | firefox | 44.0+build3-0ubuntu0.15.04.1 |
| ubuntu 15.10 | firefox, thunderbird | 44.0+build3-0ubuntu0.15.10.1 ve 1 tane daha |
| ubuntu 17.04 | mozjs38 | 38.8.0~repack1-0ubuntu0.1 |
10 kaynaktaki 18 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 7 | icedove | 38.6.0-1~deb7u1 |
| debian 7 | iceweasel | 38.6.0esr-1~deb7u1 |
| debian 8 | icedove | 38.6.0-1~deb8u1 |
| debian 8 | iceweasel | 38.6.0esr-1~deb8u1 |
| Oracle Linux 5 | firefox | 38.6.0-1.0.1.el5_11 |
| Oracle Linux 5 | thunderbird | 38.6.0-1.0.1.el5_11 |
| Oracle Linux 6 | firefox | 38.6.0-1.0.1.el6_7 |
| Oracle Linux 6 | thunderbird | 38.6.0-1.0.1.el6_7 |
| Oracle Linux 7 | firefox | 38.6.0-1.0.1.el7_2 |
| Oracle Linux 7 | thunderbird | 38.6.0-1.0.1.el7_2 |
| ubuntu 12.04 | firefox | 44.0+build3-0ubuntu0.12.04.1 |
| ubuntu 12.04 | thunderbird | 1:38.6.0+build1-0ubuntu0.12.04.1 |
| ubuntu 14.04 | firefox | 44.0+build3-0ubuntu0.14.04.1 |
| ubuntu 14.04 | thunderbird | 1:38.6.0+build1-0ubuntu0.14.04.1 |
| ubuntu 15.04 | firefox | 44.0+build3-0ubuntu0.15.04.1 |
| ubuntu 15.10 | firefox | 44.0+build3-0ubuntu0.15.10.1 |
| ubuntu 15.10 | thunderbird | 1:38.6.0+build1-0ubuntu0.15.10.1 |
| ubuntu 17.04 | mozjs38 | 38.8.0~repack1-0ubuntu0.1 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2016-0071.html
- http://rhn.redhat.com/errata/RHSA-2016-0258.html
39 referansın hepsi
- http://www.debian.org/security/2016/dsa-3457
- http://www.debian.org/security/2016/dsa-3491
- http://www.mozilla.org/security/announce/2016/mfsa2016-01.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/81953
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- http://www.ubuntu.com/usn/USN-2904-1
- https://access.redhat.com/security/cve/CVE-2016-1930
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221385
- https://bugzilla.mozilla.org/show_bug.cgi?id=1223670
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224200
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230483
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230639
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230668
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230686
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233152
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233346
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233925
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234280
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234571
- https://linux.oracle.com/cve/CVE-2016-1930.html
- https://linux.oracle.com/errata/ELSA-2016-0258.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-1930
- https://security.gentoo.org/glsa/201605-06
- https://ubuntu.com/security/notices/USN-2880-1
- https://ubuntu.com/security/notices/USN-2904-1
- https://www.cve.org/CVERecord?id=CVE-2016-1930
- https://www.mozilla.org/en-US/security/advisories/mfsa2016-01/
- https://www.mozilla.org/security/announce/2016/mfsa2016-01.html