The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4913 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 (CVE-2020-15683)

  - chromium-browser: Use after free in WebRTC (CVE-2020-15969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4909 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 78.4.0.

    Security Fix(es):

    * Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 (CVE-2020-15683)

    * chromium-browser: Use after free in WebRTC (CVE-2020-15969)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4315 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 78.4.0 ESR.

    Security Fix(es):

    * Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 (CVE-2020-15683)

    * chromium-browser: Use after free in WebRTC (CVE-2020-15969)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4948 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 78.4.0.

    Security Fix(es):

    * Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 (CVE-2020-15683)

    * chromium-browser: Use after free in WebRTC (CVE-2020-15969)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4317 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 (CVE-2020-15683)

  - chromium-browser: Use after free in WebRTC (CVE-2020-15969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4599-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the     prompt for opening an external application, obtain sensitive information, or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox fixes the following issues :

Firefox Extended Support Release 78.4.0 ESR

  - Fixed: Various stability, functionality, and security     fixes MFSA 2020-46 (bsc#1177872, bsc#1176756)

  - CVE-2020-15969 Use-after-free in usersctp

  - CVE-2020-15683 Memory safety bugs fixed in Firefox 82     and Firefox ESR 78.4

  - Fixed: Fixed legacy preferences not being properly     applied when set via GPO

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service.

ID	Name	Product	Family	Published	Updated	Severity
145844	CentOS 8 : thunderbird (CESA-2020:4913)	Nessus	CentOS Local Security Checks	2/1/2021	3/23/2021	critical
142459	RHEL 7 : thunderbird (RHSA-2020:4909)	Nessus	Red Hat Local Security Checks	11/4/2020	11/7/2024	critical
141823	RHEL 8 : firefox (RHSA-2020:4315)	Nessus	Red Hat Local Security Checks	10/22/2020	11/7/2024	critical
142477	RHEL 8 : thunderbird (RHSA-2020:4948)	Nessus	Red Hat Local Security Checks	11/5/2020	11/7/2024	critical
145924	CentOS 8 : firefox (CESA-2020:4317)	Nessus	CentOS Local Security Checks	2/1/2021	3/23/2021	critical
141863	Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-4599-1)	Nessus	Ubuntu Local Security Checks	10/24/2020	8/29/2024	critical
143862	SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:3021-1)	Nessus	SuSE Local Security Checks	12/9/2020	2/5/2024	critical
141897	Debian DSA-4780-1 : thunderbird - security update	Nessus	Debian Local Security Checks	10/26/2020	11/12/2020	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical