Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in some instances. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade seamonkeyUpgrade firefox-esrUpgrade linux-firefoxUpgrade waterfoxUpgrade libxulUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0Upgrade to the latest version of Mozilla Firefox | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nspr-develUpgrade mozilla-nspr-32bitUpgrade libsoftokn3Upgrade firefox-gtk3-immodules-tigrignaUpgrade libfirefox-gthread-2_0-0Upgrade libfreebl3Upgrade MozillaThunderbirdUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-thaiUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-develUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade firefox-glib2-langUpgrade mozillafirefox-branding-sleUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libharfbuzz0Upgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-buildsymbolsUpgrade libsoftokn3-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libatk-1_0-0Upgrade firefox-atk-langUpgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-langUpgrade firefox-libffi4Upgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefoxUpgrade firefox-libcairo-gobject2Upgrade mozilla-nss-certs-32bitUpgrade firefox-libpango-1_0-0Upgrade libfreebl3-32bitUpgrade firefox-libffi7Upgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-32bitUpgrade firefox-glib2-toolsUpgrade mozillafirefox-buildsymbolsUpgrade enigmailUpgrade libfirefox-gio-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-toolsUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nss | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub