Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in some instances. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade firefoxUpgrade libxulUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-firefoxUpgrade firefox-esrUpgrade seamonkeyUpgrade waterfox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade libfirefox-glib-2_0-0Upgrade mozillafirefoxUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libcairo2Upgrade firefox-libpango-1_0-0Upgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libffi7Upgrade libfreebl3-32bitUpgrade firefox-gtk3-dataUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libcairo-gobject2Upgrade firefox-atk-langUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-toolsUpgrade libfirefox-gobject-2_0-0Upgrade firefox-glib2-toolsUpgrade firefox-libffi4Upgrade mozillafirefox-branding-sledUpgrade mozilla-nssUpgrade firefox-gtk3-langUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-32bitUpgrade enigmailUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozillafirefox-buildsymbolsUpgrade mozillathunderbirdUpgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade mozillathunderbird-translations-otherUpgrade mozillathunderbird-translations-commonUpgrade libsoftokn3Upgrade firefox-gtk3-immodule-inuktitutUpgrade libfirefox-gthread-2_0-0Upgrade mozillafirefox-translations-otherUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-branding-upstreamUpgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-32bitUpgrade firefox-libgtk-3-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade mozilla-nspr-develUpgrade firefox-libharfbuzz0Upgrade mozilla-nsprUpgrade mozillafirefox-branding-sleUpgrade libfreebl3Upgrade libsoftokn3-32bitUpgrade mozillafirefox-develUpgrade MozillaThunderbird-buildsymbols | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub