This update for MozillaThunderbird version 60.8 fixes the following issues :

Security issues fixed :

  - CVE-2019-9811: Sandbox escape via installation of     malicious language pack (bsc#1140868).

  - CVE-2019-11711: Script injection within domain through     inner window reuse (bsc#1140868).

  - CVE-2019-11712: Cross-origin POST requests can be made     with NPAPI plugins by following 308 redirects     (bsc#1140868).

  - CVE-2019-11713: Use-after-free with HTTP/2 cached stream     (bsc#1140868).

  - CVE-2019-11729: Empty or malformed p256-ECDH public keys     may trigger a segmentation fault (bsc#1140868).

  - CVE-2019-11715: HTML parsing error can contribute to     content XSS (bsc#1140868).

  - CVE-2019-11717: Caret character improperly escaped in     origins (bsc#1140868).

  - CVE-2019-11719: Out-of-bounds read when importing     curve25519 private key (bsc#1140868).

  - CVE-2019-11730: Same-origin policy treats all files in a     directory as having the same-origin (bsc#1140868).

  - CVE-2019-11709: Multiple Memory safety bugs fixed     (bsc#1140868).

Non-security issued fixed :

  - Calendar: Problems when editing event times, some     related to AM/PM setting in non-English locales

This update was imported from the SUSE:SLE-15:Update update project.

The version of AOS installed on the remote host is prior to 5.16.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.16.1 advisory.

  - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated     the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
    (CVE-2019-5544)

  - In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy     blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user     ID. For example, this allows bypass of !root configuration, and USER= logging, for a sudo -u     \#$((0xffffffff)) command. (CVE-2019-14287)

  - Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly     sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox     < 68, and Thunderbird < 60.8. (CVE-2019-11729)

  - When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the     block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-11745)

  - An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an
    __blk_drain_queue() use-after-free because a certain error case is mishandled. (CVE-2018-20856)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4054-1 advisory.

    A sandbox escape was discovered in Firefox. If a user were tricked in to installing a malicious language     pack, an attacker could exploit this to gain additional privileges. (CVE-2019-9811)

    Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information, bypass same origin restrictions, conduct cross-site scripting (XSS) attacks,     conduct cross-site request forgery (CSRF) attacks, spoof origin attributes, spoof the addressbar contents,     bypass safebrowsing protections, or execute arbitrary code. (CVE-2019-11709, CVE-2019-11710,     CVE-2019-11711, CVE-2019-11712, CVE-2019-11713, CVE-2019-11714, CVE-2019-11715, CVE-2019-11716,     CVE-2019-11717, CVE-2019-11718, CVE-2019-11719, CVE-2019-11720, CVE-2019-11721, CVE-2019-11723,     CVE-2019-11724, CVE-2019-11725, CVE-2019-11727, CVE-2019-11728, CVE-2019-11729)

    It was discovered that Firefox treats all files in a directory as same origin. If a user were tricked in     to downloading a specially crafted HTML file, an attacker could potentially exploit this to obtain     sensitive information from local files. (CVE-2019-11730)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
127733	openSUSE Security Update : MozillaThunderbird (openSUSE-2019-1813)	Nessus	SuSE Local Security Checks	8/12/2019	5/6/2024	critical
164695	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.16.1)	Nessus	Misc.	9/6/2022	7/22/2025	critical
126698	Ubuntu 16.04 LTS / 18.04 LTS : Firefox vulnerabilities (USN-4054-1)	Nessus	Ubuntu Local Security Checks	7/15/2019	8/27/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical