Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in some instances. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade libxulUpgrade firefoxUpgrade waterfoxUpgrade firefox-esrUpgrade seamonkeyUpgrade linux-firefox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0Upgrade to the latest version of Mozilla Firefox | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libcairo2Upgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libatk-1_0-0Upgrade MozillaThunderbird-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade libfreebl3-32bitUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-atk-langUpgrade mozillafirefox-buildsymbolsUpgrade firefox-libffi7Upgrade firefox-gtk3-langUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-32bitUpgrade firefox-glib2-toolsUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-gio-2_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade MozillaFirefoxUpgrade firefox-gtk3-dataUpgrade firefox-gdk-pixbuf-langUpgrade enigmailUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nssUpgrade firefox-libffi4Upgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-thaiUpgrade libsoftokn3-32bitUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nss-certsUpgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-branding-sleUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade MozillaThunderbird-translations-otherUpgrade libsoftokn3Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbirdUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfreebl3Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nsprUpgrade firefox-libgtk-3-0Upgrade firefox-libharfbuzz0Upgrade mozilla-nss-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-lang | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub