RHSA-2019:1265

Vulnerability from csaf_opensuse - Published: 2019-05-23 00:00 - Updated: 2026-09-20 11:03
Summary
security update for firefox
Severity
Critical
Notes
Title of the patch: security update for firefox
Description of the patch: This security update provides a functional equivalent of RHSA-2019:1265. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2019:1265.
Patchnames: RHSA-2019:1265
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2018-18511
4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2019-11691
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-11692
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-11693
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-11698
6.1 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-5798
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact moderate
CVE-2019-7317
5.5 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact moderate
CVE-2019-9797
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-9800
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-9816
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-9817
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-9819
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
CVE-2019-9820
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2018-18511
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2018-18511/ self
https://www.suse.com/security/cve/CVE-2019-11691/ self
https://www.suse.com/security/cve/CVE-2019-11692/ self
https://www.suse.com/security/cve/CVE-2019-11693/ self
https://www.suse.com/security/cve/CVE-2019-11698/ self
https://www.suse.com/security/cve/CVE-2019-5798/ self
https://www.suse.com/security/cve/CVE-2019-7317/ self
https://www.suse.com/security/cve/CVE-2019-9797/ self
https://www.suse.com/security/cve/CVE-2019-9800/ self
https://www.suse.com/security/cve/CVE-2019-9816/ self
https://www.suse.com/security/cve/CVE-2019-9817/ self
https://www.suse.com/security/cve/CVE-2019-9819/ self
https://www.suse.com/security/cve/CVE-2019-9820/ self
https://www.suse.com/security/cve/CVE-2018-18511 external
https://bugzilla.suse.com/1125330 external
https://bugzilla.suse.com/1125396 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-11691 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-11692 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-11693 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-11698 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-5798 external
https://bugzilla.suse.com/1129059 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-7317 external
https://bugzilla.suse.com/1124211 external
https://bugzilla.suse.com/1135824 external
https://bugzilla.suse.com/1141780 external
https://bugzilla.suse.com/1147021 external
https://bugzilla.suse.com/1165297 external
https://www.suse.com/security/cve/CVE-2019-9797 external
https://bugzilla.suse.com/1129821 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-9800 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-9816 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-9817 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-9819 external
https://bugzilla.suse.com/1135824 external
https://www.suse.com/security/cve/CVE-2019-9820 external
https://bugzilla.suse.com/1135824 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for firefox",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2019:1265.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2019:1265.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2019:1265",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2019_1265.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-18511 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-18511/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11691 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11692 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11693 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11693/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11698 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11698/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5798 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5798/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7317 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7317/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9797 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9797/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9800 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9800/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9816 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9816/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9817 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9817/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9819 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9819/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9820 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9820/"
      }
    ],
    "title": "security update for firefox",
    "tracking": {
      "current_release_date": "2026-09-20T11:03:00Z",
      "generator": {
        "date": "2019-05-23T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2019:1265",
      "initial_release_date": "2019-05-23T00:00:00Z",
      "revision_history": [
        {
          "date": "2019-05-23T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:03:00Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:60.7.0-1.el7_6.i686",
                "product": {
                  "name": "firefox-0:60.7.0-1.el7_6.i686",
                  "product_id": "firefox-0:60.7.0-1.el7_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox@60.7.0-1.el7_6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:60.7.0-1.el7_6.x86_64",
                "product": {
                  "name": "firefox-0:60.7.0-1.el7_6.x86_64",
                  "product_id": "firefox-0:60.7.0-1.el7_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox@60.7.0-1.el7_6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el7_6.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686"
        },
        "product_reference": "firefox-0:60.7.0-1.el7_6.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el7_6.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        },
        "product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-18511",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-18511"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-18511",
          "url": "https://www.suse.com/security/cve/CVE-2018-18511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1125330 for CVE-2018-18511",
          "url": "https://bugzilla.suse.com/1125330"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1125396 for CVE-2018-18511",
          "url": "https://bugzilla.suse.com/1125396"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2018-18511",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-18511"
    },
    {
      "cve": "CVE-2019-11691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11691",
          "url": "https://www.suse.com/security/cve/CVE-2019-11691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-11691",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11691"
    },
    {
      "cve": "CVE-2019-11692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11692",
          "url": "https://www.suse.com/security/cve/CVE-2019-11692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-11692",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11692"
    },
    {
      "cve": "CVE-2019-11693",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11693"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11693",
          "url": "https://www.suse.com/security/cve/CVE-2019-11693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-11693",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11693"
    },
    {
      "cve": "CVE-2019-11698",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11698"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11698",
          "url": "https://www.suse.com/security/cve/CVE-2019-11698"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-11698",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11698"
    },
    {
      "cve": "CVE-2019-5798",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5798"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5798",
          "url": "https://www.suse.com/security/cve/CVE-2019-5798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1129059 for CVE-2019-5798",
          "url": "https://bugzilla.suse.com/1129059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-5798",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5798"
    },
    {
      "cve": "CVE-2019-7317",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7317"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7317",
          "url": "https://www.suse.com/security/cve/CVE-2019-7317"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124211 for CVE-2019-7317",
          "url": "https://bugzilla.suse.com/1124211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-7317",
          "url": "https://bugzilla.suse.com/1135824"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141780 for CVE-2019-7317",
          "url": "https://bugzilla.suse.com/1141780"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1147021 for CVE-2019-7317",
          "url": "https://bugzilla.suse.com/1147021"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165297 for CVE-2019-7317",
          "url": "https://bugzilla.suse.com/1165297"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7317"
    },
    {
      "cve": "CVE-2019-9797",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9797"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9797",
          "url": "https://www.suse.com/security/cve/CVE-2019-9797"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1129821 for CVE-2019-9797",
          "url": "https://bugzilla.suse.com/1129821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-9797",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9797"
    },
    {
      "cve": "CVE-2019-9800",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9800"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9800",
          "url": "https://www.suse.com/security/cve/CVE-2019-9800"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-9800",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9800"
    },
    {
      "cve": "CVE-2019-9816",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9816"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9816",
          "url": "https://www.suse.com/security/cve/CVE-2019-9816"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-9816",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9816"
    },
    {
      "cve": "CVE-2019-9817",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9817"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9817",
          "url": "https://www.suse.com/security/cve/CVE-2019-9817"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-9817",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9817"
    },
    {
      "cve": "CVE-2019-9819",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9819"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9819",
          "url": "https://www.suse.com/security/cve/CVE-2019-9819"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-9819",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9819"
    },
    {
      "cve": "CVE-2019-9820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
          "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9820",
          "url": "https://www.suse.com/security/cve/CVE-2019-9820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135824 for CVE-2019-9820",
          "url": "https://bugzilla.suse.com/1135824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.i686",
            "SUSE Liberty Linux 7:firefox-0:60.7.0-1.el7_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9820"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.