The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:0166 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and     Thunderbird 128.6 (CVE-2025-0243)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19,     Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:0284 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and     Thunderbird 128.6 (CVE-2025-0243)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19,     Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7191-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information across domains, or execute arbitrary code. (CVE-2025-0237, CVE-2025-0239,     CVE-2025-0240, CVE-2025-0242, CVE-2025-0243, CVE-2025-0247)

    Irvan Kurniawan discovered that Firefox incorrectly handled memory when breaking lines in text, leading to     a use-after-free vulnerability. An attacker could possibly use this issue to cause a denial of service or     possibly execute arbitrary code. (CVE-2025-0238)

    Nils Bars discovered that Firefox incorrectly handled memory when using JavaScript Text Segmentation. An     attacker could possibly use this issue to cause a denial of service. (CVE-2025-0241)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:0144 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: Use-after-free when breaking lines in text (CVE-2025-0238)

    * firefox: Memory corruption when using JavaScript Text Segmentation (CVE-2025-0241)

    * firefox: Alt-Svc ALPN validation failure when redirected (CVE-2025-0239)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and     Thunderbird 128.6 (CVE-2025-0243)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19,     Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242)

    * firefox: WebChannel APIs susceptible to confused deputy attack (CVE-2025-0237)

    * firefox: Compartment mismatch when parsing JavaScript JSON module (CVE-2025-0240)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5841 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5841-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     January 10, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : thunderbird     CVE ID         : CVE-2024-50336 CVE-2025-0237 CVE-2025-0238 CVE-2025-0239                      CVE-2025-0240 CVE-2025-0241 CVE-2025-0242 CVE-2025-0243

    Multiple security issues were discovered in Thunderbird, which could     result in the execution of arbitrary code.

    For the stable distribution (bookworm), these problems have been fixed in     version 1:128.6.0esr-1~deb12u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-91031f9df9 advisory.

    Update to 128.6.0

    * https://www.thunderbird.net/en-US/thunderbird/128.6.0esr/releasenotes/
    * https://www.mozilla.org/en-US/security/advisories/mfsa2025-04/

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:0287 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and     Thunderbird 128.6 (CVE-2025-0243)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19,     Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
213659	RHEL 9 : thunderbird (RHSA-2025:0166)	Nessus	Red Hat Local Security Checks	2025/1/9	2025/6/5	high
214058	RHEL 8 : thunderbird (RHSA-2025:0284)	Nessus	Red Hat Local Security Checks	2025/1/14	2025/6/5	high
213603	Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-7191-1)	Nessus	Ubuntu Local Security Checks	2025/1/9	2025/2/6	critical
213629	RHEL 8 : firefox (RHSA-2025:0144)	Nessus	Red Hat Local Security Checks	2025/1/9	2025/6/5	high
213960	Debian dsa-5841 : thunderbird - security update	Nessus	Debian Local Security Checks	2025/1/10	2025/1/31	medium
214055	Fedora 40 : thunderbird (2025-91031f9df9)	Nessus	Fedora Local Security Checks	2025/1/14	2025/1/31	high
214068	RHEL 8 : thunderbird (RHSA-2025:0287)	Nessus	Red Hat Local Security Checks	2025/1/14	2025/6/5	high

检测

插件搜索

high

high

critical

high

medium

high

high