CVE-2019-17026
High · 8.8 CISA KEVCVSS
8.8
EPSS
46.3%
Published
Mar 2, 2020
CISA due date
May 3, 2022
The record
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | firefox-esr | 0 | 68.4.1esr-1~deb10u1 |
| Debian:10 | thunderbird | 0 | 1:68.4.1-1~deb10u1 |
| Debian:11 | firefox-esr | 0 | 68.4.1esr-1 |
| Debian:11 | thunderbird | 0 | 1:68.4.1-1 |
| Debian:12 | firefox-esr | 0 | 68.4.1esr-1 |
| Debian:12 | thunderbird | 0 | 1:68.4.1-1 |
| Debian:13 | firefox-esr | 0 | 68.4.1esr-1 |
| Debian:13 | thunderbird | 0 | 1:68.4.1-1 |
| Debian:8 | firefox-esr | 0 | 68.4.1esr-1~deb8u1 |
| Debian:8 | thunderbird | 0 | 1:68.4.1-1~deb8u1 |
| Debian:9 | firefox-esr | 0 | 68.4.1esr-1~deb9u1 |
| Debian:9 | thunderbird | 0 | 1:68.4.1-1~deb9u1 |
| Mageia:7 | firefox | 0 | 68.4.1-1.mga7 |
| Mageia:7 | firefox-l10n | 0 | 68.4.1-1.mga7 |
| Mageia:7 | nss | 0 | 3.49.0-1.mga7 |
| Mageia:7 | thunderbird | 0 | 68.4.1-1.mga7 |
| Mageia:7 | thunderbird-l10n | 0 | 68.4.1-1.mga7 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:68.4.1-1.el6_10 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:68.4.1-1.el6_10 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:68.4.1-2.el6_10 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:68.4.1-2.el6_10 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:68.4.1-1.el6_10 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:68.4.1-1.el6_10 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:68.4.1-1.el6_10 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:68.4.1-1.el6_10 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:68.4.1-2.el6_10 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:68.4.1-2.el6_10 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:68.4.1-1.el6_10 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:68.4.1-1.el6_10 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:68.4.1-2.el6_10 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:68.4.1-2.el6_10 |
| Red Hat:enterprise_linux:7::client | firefox | 0 | 0:68.4.1-1.el7_7 |
| Red Hat:enterprise_linux:7::client | firefox-debuginfo | 0 | 0:68.4.1-1.el7_7 |
| Red Hat:enterprise_linux:7::client | thunderbird | 0 | 0:68.4.1-2.el7_7 |
| Red Hat:enterprise_linux:7::client | thunderbird-debuginfo | 0 | 0:68.4.1-2.el7_7 |
| Red Hat:enterprise_linux:7::server | firefox | 0 | 0:68.4.1-1.el7_7 |
| Red Hat:enterprise_linux:7::server | firefox-debuginfo | 0 | 0:68.4.1-1.el7_7 |
| Red Hat:enterprise_linux:7::server | thunderbird | 0 | 0:68.4.1-2.el7_7 |
| Red Hat:enterprise_linux:7::server | thunderbird-debuginfo | 0 | 0:68.4.1-2.el7_7 |
| Red Hat:enterprise_linux:7::workstation | firefox | 0 | 0:68.4.1-1.el7_7 |
| Red Hat:enterprise_linux:7::workstation | firefox-debuginfo | 0 | 0:68.4.1-1.el7_7 |
| Red Hat:enterprise_linux:7::workstation | thunderbird | 0 | 0:68.4.1-2.el7_7 |
| Red Hat:enterprise_linux:7::workstation | thunderbird-debuginfo | 0 | 0:68.4.1-2.el7_7 |
| Red Hat:enterprise_linux:8::appstream | firefox | 0 | 0:68.4.1-1.el8_1 |
| Red Hat:enterprise_linux:8::appstream | firefox-debuginfo | 0 | 0:68.4.1-1.el8_1 |
| Red Hat:enterprise_linux:8::appstream | firefox-debugsource | 0 | 0:68.4.1-1.el8_1 |
| Red Hat:enterprise_linux:8::appstream | thunderbird | 0 | 0:68.4.1-2.el8_1 |
| Red Hat:enterprise_linux:8::appstream | thunderbird-debuginfo | 0 | 0:68.4.1-2.el8_1 |
| Red Hat:enterprise_linux:8::appstream | thunderbird-debugsource | 0 | 0:68.4.1-2.el8_1 |
| Red Hat:rhel_e4s:8.0::appstream | firefox | 0 | 0:68.4.1-1.el8_0 |
| Red Hat:rhel_e4s:8.0::appstream | firefox-debuginfo | 0 | 0:68.4.1-1.el8_0 |
| Red Hat:rhel_e4s:8.0::appstream | firefox-debugsource | 0 | 0:68.4.1-1.el8_0 |
| Red Hat:rhel_e4s:8.0::appstream | thunderbird | 0 | 0:68.4.1-2.el8_0 |
| Red Hat:rhel_e4s:8.0::appstream | thunderbird-debuginfo | 0 | 0:68.4.1-2.el8_0 |
| Red Hat:rhel_e4s:8.0::appstream | thunderbird-debugsource | 0 | 0:68.4.1-2.el8_0 |
| SUSE:Enterprise Storage 5 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:HPE Helion OpenStack 8 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Desktop 12 SP4 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox | 0 | 68.4.1-3.66.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 | MozillaFirefox | 0 | 68.4.1-3.66.1 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | MozillaFirefox | 0 | 68.4.1-78.57.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server 12 SP4 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server 12 SP5 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:Linux Enterprise Workstation Extension 15 | MozillaThunderbird | 0 | 68.4.1-3.66.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP1 | MozillaThunderbird | 0 | 68.4.1-3.66.1 |
| SUSE:OpenStack Cloud 7 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:OpenStack Cloud 8 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| SUSE:OpenStack Cloud Crowbar 8 | MozillaFirefox | 0 | 68.4.1-109.101.1 |
| Ubuntu:16.04:LTS | firefox | 0 | 72.0.1+build1-0ubuntu0.16.04.1 |
| Ubuntu:16.04:LTS | thunderbird | 0 | 1:68.7.0+build1-0ubuntu0.16.04.2 |
| Ubuntu:18.04:LTS | firefox | 0 | 72.0.1+build1-0ubuntu0.18.04.1 |
| Ubuntu:18.04:LTS | mozjs38 | 0 | No fix |
| Ubuntu:18.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:18.04:LTS | thunderbird | 0 | 1:68.4.1+build1-0ubuntu0.18.04.1 |
| Ubuntu:20.04:LTS | firefox | 0 | 72.0.1+build1-0ubuntu1 |
| Ubuntu:20.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:20.04:LTS | thunderbird | 0 | 1:68.4.1+build1-0ubuntu1 |
| Ubuntu:Pro:18.04:LTS | mozjs38 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | mozjs52 | 0 | No fix |
| openSUSE:Leap 15.1 | MozillaFirefox | 0 | 68.4.1-lp151.2.24.1 |
| openSUSE:Leap 15.1 | MozillaThunderbird | 0 | 68.4.1-lp151.2.22.2 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 92.0-1.2 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 91.1.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2024-5696 By manipulating the text in an `input` tag, an attacker could have caused corrupt memory… Also affects firefox-esr
- CVE-2024-5700 Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Also affects firefox-esr
- CVE-2024-5702 Memory corruption in the networking stack could have led to a potentially exploitable… Also affects firefox-esr
- CVE-2024-5693 Offscreen Canvas did not properly track cross-origin tainting, which could be used to… Also affects firefox-esr
- CVE-2024-5688 If a garbage collection was triggered at the right time, a use-after-free could have… Also affects firefox-esr
- CVE-2024-5691 By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have… Also affects firefox-esr
- CVE-2024-5690 By monitoring the time certain operations take, an attacker could have guessed which… Also affects firefox-esr
- CVE-2024-4777 Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Also affects firefox-esr