The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:4195 advisory.

  - Mozilla: Buffer overflow in plain text serializer (CVE-2019-17005)

  - Mozilla: Use-after-free in worker destruction (CVE-2019-17008)

  - Mozilla: Use-after-free when performing device orientation checks (CVE-2019-17010)

  - Mozilla: Use-after-free when retrieving a document in antitracking (CVE-2019-17011)

  - Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 (CVE-2019-17012)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - Mozilla: Use-after-free in worker destruction     (CVE-2019-17008)

  - Mozilla: Memory safety bugs fixed in Firefox 71 and     Firefox ESR 68.3 (CVE-2019-17012)

  - Mozilla: Buffer overflow in plain text serializer     (CVE-2019-17005)

  - Mozilla: Use-after-free when performing device     orientation checks (CVE-2019-17010)

  - Mozilla: Use-after-free when retrieving a document in     antitracking (CVE-2019-17011)

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

For Debian 8 'Jessie', these problems have been fixed in version 68.3.0esr-1~deb8u1.

We recommend that you upgrade your firefox-esr packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4216-2 advisory.

    USN-4216-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Ubuntu     16.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4205 advisory.

    [68.3.0-3.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [68.3.0-3]
    - Update to 68.3.0 build2

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4108 advisory.

    - Added fix for mozbz#1348168/CVE-2017-5428

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4414:07 advisory.

    * Mozilla: Use-after-free in worker destruction (CVE-2019-17008)
      * Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 (CVE-2019-17012)
      * Mozilla: Buffer overflow in plain text serializer (CVE-2019-17005)
      * Mozilla: Use-after-free when performing device orientation checks (CVE-2019-17010)
      * Mozilla: Use-after-free when retrieving a document in antitracking (CVE-2019-17011)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-4404:04 advisory.

    * Mozilla: Use-after-free in worker destruction (CVE-2019-17008)
      * Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 (CVE-2019-17012)
      * Mozilla: Buffer overflow in plain text serializer (CVE-2019-17005)
      * Mozilla: Use-after-free when performing device orientation checks (CVE-2019-17010)
      * Mozilla: Use-after-free when retrieving a document in antitracking (CVE-2019-17011)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4241-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, conduct cross-site scripting (XSS) attacks, or execute arbitrary code. (CVE-2019-17005,     CVE-2019-17008, CVE-2019-17010, CVE-2019-17011, CVE-2019-17012, CVE-2019-17016, CVE-2019-17017,     CVE-2019-17022, CVE-2019-17024, CVE-2019-17026)

    It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could     potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2019-11745)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
145636	CentOS 8 : thunderbird (CESA-2019:4195)	Nessus	CentOS Local Security Checks	2021/1/29	2024/1/25	high
131830	Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20191205)	Nessus	Scientific Linux Local Security Checks	2019/12/9	2024/4/5	high
131962	Debian DLA-2029-1 : firefox-esr security update	Nessus	Debian Local Security Checks	2019/12/12	2024/4/4	high
132482	NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0265)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2024/4/2	high
183555	Ubuntu 16.04 LTS : Firefox vulnerabilities (USN-4216-2)	Nessus	Ubuntu Local Security Checks	2023/10/20	2024/10/29	high
180656	Oracle Linux 6 : thunderbird (ELSA-2019-4205)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	high
180734	Oracle Linux 6 : firefox (ELSA-2019-4108)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	high
288938	MiracleLinux 4 : firefox-68.3.0-1.0.1.AXS4 (AXSA:2019-4414:07)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
289077	MiracleLinux 4 : thunderbird-68.3.0-3.AXS4 (AXSA:2019-4404:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
133040	Ubuntu 18.04 LTS : Thunderbird vulnerabilities (USN-4241-1)	Nessus	Ubuntu Local Security Checks	2020/1/17	2024/8/27	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high