Описание
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 66.0.1+build1-0ubuntu0.18.04.1 |
| cosmic | released | 66.0.1+build1-0ubuntu0.18.10.1 |
| devel | released | 66.0.1+build1-0ubuntu1 |
| disco | released | 66.0.1+build1-0ubuntu1 |
| eoan | released | 66.0.1+build1-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [66.0.1+build1-0ubuntu0.14.04.1]] |
| esm-infra/focal | DNE | |
| focal | released | 66.0.1+build1-0ubuntu1 |
| groovy | released | 66.0.1+build1-0ubuntu1 |
| hirsute | released | 66.0.1+build1-0ubuntu1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-apps/bionic | ignored | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| cosmic | ignored | end of life |
| devel | DNE | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps/focal | ignored | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | ignored | |
| focal | ignored | |
| groovy | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| cosmic | ignored | end of life |
| devel | DNE | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:60.6.1+build2-0ubuntu0.18.04.1 |
| cosmic | released | 1:60.6.1+build2-0ubuntu0.18.10.1 |
| devel | released | 60.6.1+build2-0ubuntu1 |
| disco | released | 60.6.1+build2-0ubuntu1 |
| eoan | released | 60.6.1+build2-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1:60.6.1+build2-0ubuntu0.14.04.1]] |
| esm-infra/focal | DNE | |
| focal | released | 60.6.1+build2-0ubuntu1 |
| groovy | released | 60.6.1+build2-0ubuntu1 |
| hirsute | released | 60.6.1+build2-0ubuntu1 |
Показывать по
Ссылки на источники
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.
Incorrect alias information in IonMonkey JIT compiler for Array.protot ...
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.
Уязвимость метода Array.prototype.slice JIT-компилятора IonMonkey браузера Firefox ESR, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3