Debian DLA-1836-1 : thunderbird security update

critical Nessus Plugin ID 126247

Synopsis

The remote Debian host is missing a security update.

Description

Multiple security issues have been found in Thunderbird which may lead to the execution of arbitrary code if malformed email messages are read.

For Debian 8 'Jessie', these problems have been fixed in version 1:60.7.2-1~deb8u1.

We recommend that you upgrade your thunderbird packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Upgrade the affected packages.

See Also

https://lists.debian.org/debian-lts-announce/2019/06/msg00024.html

https://packages.debian.org/source/jessie/thunderbird

Plugin Details

Severity: Critical

ID: 126247

File Name: debian_DLA-1836.nasl

Version: 1.8

Type: local

Agent: unix

Published: 6/26/2019

Updated: 5/25/2022

Supported Sensors: Frictionless Assessment Agent, Nessus Agent

Risk Information

VPR

Risk Factor: Critical

Score: 9.2

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: E:POC/RL:OF/RC:C

CVSS v3

Risk Factor: Critical

Base Score: 10

Temporal Score: 9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Temporal Vector: E:P/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:calendar-google-provider, p-cpe:/a:debian:debian_linux:icedove, p-cpe:/a:debian:debian_linux:icedove-dbg, p-cpe:/a:debian:debian_linux:icedove-dev, p-cpe:/a:debian:debian_linux:icedove-l10n-all, p-cpe:/a:debian:debian_linux:icedove-l10n-ar, p-cpe:/a:debian:debian_linux:icedove-l10n-ast, p-cpe:/a:debian:debian_linux:icedove-l10n-be, p-cpe:/a:debian:debian_linux:icedove-l10n-bg, p-cpe:/a:debian:debian_linux:icedove-l10n-bn-bd, p-cpe:/a:debian:debian_linux:icedove-l10n-br, p-cpe:/a:debian:debian_linux:icedove-l10n-ca, p-cpe:/a:debian:debian_linux:icedove-l10n-cs, p-cpe:/a:debian:debian_linux:icedove-l10n-da, p-cpe:/a:debian:debian_linux:icedove-l10n-de, p-cpe:/a:debian:debian_linux:icedove-l10n-dsb, p-cpe:/a:debian:debian_linux:icedove-l10n-el, p-cpe:/a:debian:debian_linux:icedove-l10n-en-gb, p-cpe:/a:debian:debian_linux:icedove-l10n-es-ar, p-cpe:/a:debian:debian_linux:icedove-l10n-es-es, p-cpe:/a:debian:debian_linux:icedove-l10n-et, p-cpe:/a:debian:debian_linux:icedove-l10n-eu, p-cpe:/a:debian:debian_linux:icedove-l10n-fi, p-cpe:/a:debian:debian_linux:icedove-l10n-fr, p-cpe:/a:debian:debian_linux:icedove-l10n-fy-nl, p-cpe:/a:debian:debian_linux:icedove-l10n-ga-ie, p-cpe:/a:debian:debian_linux:icedove-l10n-gd, p-cpe:/a:debian:debian_linux:icedove-l10n-gl, p-cpe:/a:debian:debian_linux:icedove-l10n-he, p-cpe:/a:debian:debian_linux:icedove-l10n-hr, p-cpe:/a:debian:debian_linux:icedove-l10n-hsb, p-cpe:/a:debian:debian_linux:icedove-l10n-hu, p-cpe:/a:debian:debian_linux:icedove-l10n-hy-am, p-cpe:/a:debian:debian_linux:icedove-l10n-id, p-cpe:/a:debian:debian_linux:icedove-l10n-is, p-cpe:/a:debian:debian_linux:icedove-l10n-it, p-cpe:/a:debian:debian_linux:icedove-l10n-ja, p-cpe:/a:debian:debian_linux:icedove-l10n-kab, p-cpe:/a:debian:debian_linux:icedove-l10n-ko, p-cpe:/a:debian:debian_linux:icedove-l10n-lt, p-cpe:/a:debian:debian_linux:icedove-l10n-nb-no, p-cpe:/a:debian:debian_linux:icedove-l10n-nl, p-cpe:/a:debian:debian_linux:icedove-l10n-nn-no, p-cpe:/a:debian:debian_linux:icedove-l10n-pa-in, p-cpe:/a:debian:debian_linux:icedove-l10n-pl, p-cpe:/a:debian:debian_linux:icedove-l10n-pt-br, p-cpe:/a:debian:debian_linux:icedove-l10n-pt-pt, p-cpe:/a:debian:debian_linux:icedove-l10n-rm, p-cpe:/a:debian:debian_linux:icedove-l10n-ro, p-cpe:/a:debian:debian_linux:icedove-l10n-ru, p-cpe:/a:debian:debian_linux:icedove-l10n-si, p-cpe:/a:debian:debian_linux:icedove-l10n-sk, p-cpe:/a:debian:debian_linux:icedove-l10n-sl, p-cpe:/a:debian:debian_linux:icedove-l10n-sq, p-cpe:/a:debian:debian_linux:icedove-l10n-sr, p-cpe:/a:debian:debian_linux:icedove-l10n-sv-se, p-cpe:/a:debian:debian_linux:icedove-l10n-ta-lk, p-cpe:/a:debian:debian_linux:icedove-l10n-tr, p-cpe:/a:debian:debian_linux:icedove-l10n-uk, p-cpe:/a:debian:debian_linux:icedove-l10n-vi, p-cpe:/a:debian:debian_linux:icedove-l10n-zh-cn, p-cpe:/a:debian:debian_linux:icedove-l10n-zh-tw, p-cpe:/a:debian:debian_linux:iceowl-extension, p-cpe:/a:debian:debian_linux:iceowl-l10n-ar, p-cpe:/a:debian:debian_linux:iceowl-l10n-ast, p-cpe:/a:debian:debian_linux:iceowl-l10n-be, p-cpe:/a:debian:debian_linux:iceowl-l10n-bg, p-cpe:/a:debian:debian_linux:iceowl-l10n-bn-bd, p-cpe:/a:debian:debian_linux:iceowl-l10n-br, p-cpe:/a:debian:debian_linux:iceowl-l10n-ca, p-cpe:/a:debian:debian_linux:iceowl-l10n-cs, p-cpe:/a:debian:debian_linux:iceowl-l10n-cy, p-cpe:/a:debian:debian_linux:iceowl-l10n-da, p-cpe:/a:debian:debian_linux:iceowl-l10n-de, p-cpe:/a:debian:debian_linux:iceowl-l10n-dsb, p-cpe:/a:debian:debian_linux:iceowl-l10n-el, p-cpe:/a:debian:debian_linux:iceowl-l10n-en-gb, p-cpe:/a:debian:debian_linux:iceowl-l10n-es-ar, p-cpe:/a:debian:debian_linux:iceowl-l10n-es-es, p-cpe:/a:debian:debian_linux:iceowl-l10n-et, p-cpe:/a:debian:debian_linux:iceowl-l10n-eu, p-cpe:/a:debian:debian_linux:iceowl-l10n-fi, p-cpe:/a:debian:debian_linux:iceowl-l10n-fr, p-cpe:/a:debian:debian_linux:iceowl-l10n-fy-nl, p-cpe:/a:debian:debian_linux:iceowl-l10n-ga-ie, p-cpe:/a:debian:debian_linux:iceowl-l10n-gd, p-cpe:/a:debian:debian_linux:iceowl-l10n-gl, p-cpe:/a:debian:debian_linux:iceowl-l10n-he, p-cpe:/a:debian:debian_linux:iceowl-l10n-hr, p-cpe:/a:debian:debian_linux:iceowl-l10n-hsb, p-cpe:/a:debian:debian_linux:iceowl-l10n-hu, p-cpe:/a:debian:debian_linux:iceowl-l10n-hy-am, p-cpe:/a:debian:debian_linux:iceowl-l10n-id, p-cpe:/a:debian:debian_linux:iceowl-l10n-is, p-cpe:/a:debian:debian_linux:iceowl-l10n-it, p-cpe:/a:debian:debian_linux:iceowl-l10n-ja, p-cpe:/a:debian:debian_linux:iceowl-l10n-kab, p-cpe:/a:debian:debian_linux:iceowl-l10n-ko, p-cpe:/a:debian:debian_linux:iceowl-l10n-lt, p-cpe:/a:debian:debian_linux:iceowl-l10n-nb-no, p-cpe:/a:debian:debian_linux:iceowl-l10n-nl, p-cpe:/a:debian:debian_linux:iceowl-l10n-nn-no, p-cpe:/a:debian:debian_linux:iceowl-l10n-pa-in, p-cpe:/a:debian:debian_linux:iceowl-l10n-pl, p-cpe:/a:debian:debian_linux:iceowl-l10n-pt-br, p-cpe:/a:debian:debian_linux:iceowl-l10n-pt-pt, p-cpe:/a:debian:debian_linux:iceowl-l10n-rm, p-cpe:/a:debian:debian_linux:iceowl-l10n-ro, p-cpe:/a:debian:debian_linux:iceowl-l10n-ru, p-cpe:/a:debian:debian_linux:iceowl-l10n-si, p-cpe:/a:debian:debian_linux:iceowl-l10n-sk, p-cpe:/a:debian:debian_linux:iceowl-l10n-sl, p-cpe:/a:debian:debian_linux:iceowl-l10n-sq, p-cpe:/a:debian:debian_linux:iceowl-l10n-sr, p-cpe:/a:debian:debian_linux:iceowl-l10n-sv-se, p-cpe:/a:debian:debian_linux:iceowl-l10n-ta-lk, p-cpe:/a:debian:debian_linux:iceowl-l10n-tr, p-cpe:/a:debian:debian_linux:iceowl-l10n-uk, p-cpe:/a:debian:debian_linux:iceowl-l10n-vi, p-cpe:/a:debian:debian_linux:iceowl-l10n-zh-cn, p-cpe:/a:debian:debian_linux:iceowl-l10n-zh-tw, p-cpe:/a:debian:debian_linux:lightning, p-cpe:/a:debian:debian_linux:lightning-l10n-ar, p-cpe:/a:debian:debian_linux:lightning-l10n-ast, p-cpe:/a:debian:debian_linux:lightning-l10n-be, p-cpe:/a:debian:debian_linux:lightning-l10n-bg, p-cpe:/a:debian:debian_linux:lightning-l10n-bn-bd, p-cpe:/a:debian:debian_linux:lightning-l10n-br, p-cpe:/a:debian:debian_linux:lightning-l10n-ca, p-cpe:/a:debian:debian_linux:lightning-l10n-cs, p-cpe:/a:debian:debian_linux:lightning-l10n-cy, p-cpe:/a:debian:debian_linux:lightning-l10n-da, p-cpe:/a:debian:debian_linux:lightning-l10n-de, p-cpe:/a:debian:debian_linux:lightning-l10n-dsb, p-cpe:/a:debian:debian_linux:lightning-l10n-el, p-cpe:/a:debian:debian_linux:lightning-l10n-en-gb, p-cpe:/a:debian:debian_linux:lightning-l10n-es-ar, p-cpe:/a:debian:debian_linux:lightning-l10n-es-es, p-cpe:/a:debian:debian_linux:lightning-l10n-et, p-cpe:/a:debian:debian_linux:lightning-l10n-eu, p-cpe:/a:debian:debian_linux:lightning-l10n-fi, p-cpe:/a:debian:debian_linux:lightning-l10n-fr, p-cpe:/a:debian:debian_linux:lightning-l10n-fy-nl, p-cpe:/a:debian:debian_linux:lightning-l10n-ga-ie, p-cpe:/a:debian:debian_linux:lightning-l10n-gd, p-cpe:/a:debian:debian_linux:lightning-l10n-gl, p-cpe:/a:debian:debian_linux:lightning-l10n-he, p-cpe:/a:debian:debian_linux:lightning-l10n-hr, p-cpe:/a:debian:debian_linux:lightning-l10n-hsb, p-cpe:/a:debian:debian_linux:lightning-l10n-hu, p-cpe:/a:debian:debian_linux:lightning-l10n-hy-am, p-cpe:/a:debian:debian_linux:lightning-l10n-id, p-cpe:/a:debian:debian_linux:lightning-l10n-is, p-cpe:/a:debian:debian_linux:lightning-l10n-it, p-cpe:/a:debian:debian_linux:lightning-l10n-ja, p-cpe:/a:debian:debian_linux:lightning-l10n-kab, p-cpe:/a:debian:debian_linux:lightning-l10n-ko, p-cpe:/a:debian:debian_linux:lightning-l10n-lt, p-cpe:/a:debian:debian_linux:lightning-l10n-nb-no, p-cpe:/a:debian:debian_linux:lightning-l10n-nl, p-cpe:/a:debian:debian_linux:lightning-l10n-nn-no, p-cpe:/a:debian:debian_linux:lightning-l10n-pa-in, p-cpe:/a:debian:debian_linux:lightning-l10n-pl, p-cpe:/a:debian:debian_linux:lightning-l10n-pt-br, p-cpe:/a:debian:debian_linux:lightning-l10n-pt-pt, p-cpe:/a:debian:debian_linux:lightning-l10n-rm, p-cpe:/a:debian:debian_linux:lightning-l10n-ro, p-cpe:/a:debian:debian_linux:lightning-l10n-ru, p-cpe:/a:debian:debian_linux:lightning-l10n-si, p-cpe:/a:debian:debian_linux:lightning-l10n-sk, p-cpe:/a:debian:debian_linux:lightning-l10n-sl, p-cpe:/a:debian:debian_linux:lightning-l10n-sq, p-cpe:/a:debian:debian_linux:lightning-l10n-sr, p-cpe:/a:debian:debian_linux:lightning-l10n-sv-se, p-cpe:/a:debian:debian_linux:lightning-l10n-ta-lk, p-cpe:/a:debian:debian_linux:lightning-l10n-tr, p-cpe:/a:debian:debian_linux:lightning-l10n-uk, p-cpe:/a:debian:debian_linux:lightning-l10n-vi, p-cpe:/a:debian:debian_linux:lightning-l10n-zh-cn, p-cpe:/a:debian:debian_linux:lightning-l10n-zh-tw, p-cpe:/a:debian:debian_linux:thunderbird, p-cpe:/a:debian:debian_linux:thunderbird-dbg, p-cpe:/a:debian:debian_linux:thunderbird-dev, p-cpe:/a:debian:debian_linux:thunderbird-l10n-all, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ar, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ast, p-cpe:/a:debian:debian_linux:thunderbird-l10n-be, p-cpe:/a:debian:debian_linux:thunderbird-l10n-bg, p-cpe:/a:debian:debian_linux:thunderbird-l10n-bn-bd, p-cpe:/a:debian:debian_linux:thunderbird-l10n-br, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ca, p-cpe:/a:debian:debian_linux:thunderbird-l10n-cs, p-cpe:/a:debian:debian_linux:thunderbird-l10n-da, p-cpe:/a:debian:debian_linux:thunderbird-l10n-de, p-cpe:/a:debian:debian_linux:thunderbird-l10n-dsb, p-cpe:/a:debian:debian_linux:thunderbird-l10n-el, p-cpe:/a:debian:debian_linux:thunderbird-l10n-en-gb, p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-ar, p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-es, p-cpe:/a:debian:debian_linux:thunderbird-l10n-et, p-cpe:/a:debian:debian_linux:thunderbird-l10n-eu, p-cpe:/a:debian:debian_linux:thunderbird-l10n-fi, p-cpe:/a:debian:debian_linux:thunderbird-l10n-fr, p-cpe:/a:debian:debian_linux:thunderbird-l10n-fy-nl, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ga-ie, p-cpe:/a:debian:debian_linux:thunderbird-l10n-gd, p-cpe:/a:debian:debian_linux:thunderbird-l10n-gl, p-cpe:/a:debian:debian_linux:thunderbird-l10n-he, p-cpe:/a:debian:debian_linux:thunderbird-l10n-hr, p-cpe:/a:debian:debian_linux:thunderbird-l10n-hsb, p-cpe:/a:debian:debian_linux:thunderbird-l10n-hu, p-cpe:/a:debian:debian_linux:thunderbird-l10n-hy-am, p-cpe:/a:debian:debian_linux:thunderbird-l10n-id, p-cpe:/a:debian:debian_linux:thunderbird-l10n-is, p-cpe:/a:debian:debian_linux:thunderbird-l10n-it, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ja, p-cpe:/a:debian:debian_linux:thunderbird-l10n-kab, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ko, p-cpe:/a:debian:debian_linux:thunderbird-l10n-lt, p-cpe:/a:debian:debian_linux:thunderbird-l10n-nb-no, p-cpe:/a:debian:debian_linux:thunderbird-l10n-nl, p-cpe:/a:debian:debian_linux:thunderbird-l10n-nn-no, p-cpe:/a:debian:debian_linux:thunderbird-l10n-pa-in, p-cpe:/a:debian:debian_linux:thunderbird-l10n-pl, p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-br, p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-pt, p-cpe:/a:debian:debian_linux:thunderbird-l10n-rm, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ro, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ru, p-cpe:/a:debian:debian_linux:thunderbird-l10n-si, p-cpe:/a:debian:debian_linux:thunderbird-l10n-sk, p-cpe:/a:debian:debian_linux:thunderbird-l10n-sl, p-cpe:/a:debian:debian_linux:thunderbird-l10n-sq, p-cpe:/a:debian:debian_linux:thunderbird-l10n-sr, p-cpe:/a:debian:debian_linux:thunderbird-l10n-sv-se, p-cpe:/a:debian:debian_linux:thunderbird-l10n-ta-lk, p-cpe:/a:debian:debian_linux:thunderbird-l10n-tr, p-cpe:/a:debian:debian_linux:thunderbird-l10n-uk, p-cpe:/a:debian:debian_linux:thunderbird-l10n-vi, p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-cn, p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-tw, cpe:/o:debian:debian_linux:8.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/25/2019

Vulnerability Publication Date: 7/23/2019

CISA Known Exploited Dates: 6/13/2022

Reference Information

CVE: CVE-2019-11707, CVE-2019-11708