The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 78.6.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2021-02 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 88.0.4324.96. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_01_stable-channel-update-for-desktop_19 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4687-1 advisory.

    A use-after-free was discovered in Firefox when handling SCTP packets. An attacker could potentially     exploit this to cause a denial of service, or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-0053 advisory.

    [78.6.1-1.0.1]
    - Remove upstream references [Orabug: 30143292]
    - Update distribution for Oracle Linux [Orabug: 30143292]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [78.6.1-1]
    - Update to 78.6.1 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox fixes the following issues :

  - Firefox Extended Support Release 78.6.1 ESR

  - Fixed: Critical security issue MFSA 2021-01     (bsc#1180623)

  - CVE-2020-16044 Use-after-free write when handling a     malicious COOKIE-ECHO SCTP chunk

This update was imported from the SUSE:SLE-15:Update update project.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0087 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 78.6.1.

    Security Fix(es):

    * Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk (CVE-2020-16044)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:0052 advisory.

  - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk (CVE-2020-16044)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox fixes the following issues :

Firefox Extended Support Release 78.6.1 ESR

  - Fixed: Critical security issue MFSA 2021-01     (bsc#1180623)

  - CVE-2020-16044 Use-after-free write when handling a     malicious COOKIE-ECHO SCTP chunk

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Google Chrome installed on the remote host is prior to 88.0.4324.96. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_01_stable-channel-update-for-desktop_19 advisory. Note that Nessus Network Monitor has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
144855	Mozilla Thunderbird < 78.6.1	Nessus	MacOS X Local Security Checks	1/11/2021	8/12/2021	high
145072	Google Chrome < 88.0.4324.96 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	1/19/2021	1/30/2024	critical
144808	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerability (USN-4687-1)	Nessus	Ubuntu Local Security Checks	1/8/2021	8/28/2024	high
144844	Oracle Linux 7 : firefox (ELSA-2021-0053)	Nessus	Oracle Linux Local Security Checks	1/11/2021	10/22/2024	high
145379	openSUSE Security Update : MozillaFirefox (openSUSE-2021-56)	Nessus	SuSE Local Security Checks	1/25/2021	1/26/2024	high
144936	RHEL 7 : thunderbird (RHSA-2021:0087)	Nessus	Red Hat Local Security Checks	1/13/2021	11/7/2024	high
145862	CentOS 8 : firefox (CESA-2021:0052)	Nessus	CentOS Local Security Checks	2/1/2021	3/23/2021	high
145275	openSUSE Security Update : MozillaFirefox (openSUSE-2021-63)	Nessus	SuSE Local Security Checks	1/25/2021	1/26/2024	high
144913	SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:0071-1)	Nessus	SuSE Local Security Checks	1/13/2021	1/30/2024	high
144926	SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:0072-1)	Nessus	SuSE Local Security Checks	1/13/2021	1/30/2024	high
701297	Google Chrome < 88.0.4324.96 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	1/19/2021	1/19/2021	high

Detections

Analytics

Plugins Search

high

critical

high

high

high

high

high

high

high

high

high