The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2378 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 68.9.0 ESR.

    Security Fix(es):

    * Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405)

    * Mozilla: JavaScript Type confusion with NativeTypes (CVE-2020-12406)

    * Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 (CVE-2020-12410)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox fixes the following issues :

Mozilla Firefox was updated to version 68.9.0 Extended Support Release (bsc#1172402).

CVE-2020-12405: Fixed a use-after-free in SharedWorkerService.

CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes.

CVE-2020-12410: Fixed multiple memory safety bugs.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
143075	RHEL 6 : firefox (RHSA-2020:2378)	Nessus	Red Hat Local Security Checks	11/19/2020	11/7/2024	high
147312	NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0002)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	4/25/2023	critical
137594	SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:1556-1)	Nessus	SuSE Local Security Checks	6/18/2020	3/6/2024	high

Detections

Analytics

Plugins Search

high

critical

high