Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in some instances. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade libxulUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade linux-thunderbirdUpgrade waterfoxUpgrade seamonkeyUpgrade linux-firefoxUpgrade firefox-esr | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0Upgrade to the latest version of Mozilla Firefox | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-multipressUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-develUpgrade libsoftokn3Upgrade MozillaThunderbirdUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-glib2-langUpgrade MozillaFirefox-translations-commonUpgrade firefox-libharfbuzz0Upgrade libfreebl3Upgrade mozilla-nss-develUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-develUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-certsUpgrade MozillaThunderbird-translations-otherUpgrade firefox-libgtk-3-0Upgrade mozillafirefox-branding-sleUpgrade libfirefox-gthread-2_0-0Upgrade MozillaFirefoxUpgrade mozilla-nssUpgrade firefox-libffi7Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libatk-1_0-0Upgrade libfirefox-gobject-2_0-0Upgrade firefox-libcairo-gobject2Upgrade firefox-atk-langUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-amharicUpgrade MozillaThunderbird-translations-commonUpgrade firefox-libpango-1_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-libcairo2Upgrade mozillafirefox-branding-upstreamUpgrade firefox-glib2-toolsUpgrade mozilla-nss-32bitUpgrade enigmailUpgrade mozilla-nss-certs-32bitUpgrade libfirefox-gio-2_0-0Upgrade mozillafirefox-buildsymbolsUpgrade firefox-gio-branding-upstreamUpgrade firefox-libffi4Upgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-langUpgrade firefox-gtk3-tools | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub